npm - @rizom/ops - Versions diffs - 0.2.0-alpha.311 → 0.2.0-alpha.312 - Mend

@rizom/ops 0.2.0-alpha.311 → 0.2.0-alpha.312

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/brains-ops.js CHANGED Viewed

@@ -672,7 +672,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `).replace(/\\n/g,`
 `).trimEnd()}
 `}var HP,cl;var lN=o(async()=>{i0();NP();uI();N4();await VP();HP=R.object({HCLOUD_TOKEN:R.string().min(1),KAMAL_SSH_PRIVATE_KEY:R.string().min(1)}),cl=R.object({servers:R.array(R.object({status:R.string(),public_net:R.object({ipv4:R.object({ip:R.string().min(1)})})}))})});import{parseArgs as sP}from"util";function m$($){return $}class B4 extends Error{constructor($){super($);this.name="CliUsageError"}}function $_($,U){let J={...U};for(let G of $)for(let[I,Q]of Object.entries(G.flags??{})){let X=J[I];if(X===void 0){J[I]=Q;continue}if(X.type!==Q.type||X.short!==Q.short||X.default!==Q.default)throw Error(`Conflicting definitions for flag --${I}: commands must agree on type, short, and default`)}return J}function U_($){let U={};for(let[J,G]of Object.entries($))U[J]={type:G.type,...G.short!==void 0?{short:G.short}:{},...G.default!==void 0?{default:G.default}:{}};return U}function I_($){if(!($ instanceof Error)||!("code"in $))return!1;return $.code==="ERR_PARSE_ARGS_UNKNOWN_OPTION"||$.code==="ERR_PARSE_ARGS_INVALID_OPTION_VALUE"}function pN($,U){let J=$_(U.commands,U.globalFlags??{}),G,I;try{({values:G,positionals:I}=sP({args:$,options:U_(J),allowPositionals:!0,strict:U.strict??!0}))}catch(X){if(I_(X))throw new B4(X.message.split(". ")[0]??X.message);throw X}if("help"in J&&G.help===!0)return{command:"help",args:[],flags:{help:!0}};if("version"in J&&G.version===!0)return{command:"version",args:[],flags:{version:!0}};let Q={};for(let[X,O]of Object.entries(J)){let q=G[X];if(typeof q==="string"&&O.type==="string")Q[X]=q;else if(typeof q==="boolean"&&O.type==="boolean")Q[X]=q}return{command:I[0]??"help",args:I.slice(1),flags:Q}}function oN($){let U=$.reduce((J,G)=>Math.max(J,G.label.length),0);return $.map((J)=>`  ${J.label.padEnd(U)}  ${J.description}`)}function J_($){return oN($.map((U)=>({label:U.usage?`${U.name} ${U.usage}`:U.name,description:U.description})))}function G_($,U){let J=U.type==="string"?` ${U.placeholder??"<value>"}`:"",G=U.short!==void 0?`, -${U.short}`:"";return`--${$}${J}${G}`}function aN($){return oN(Object.entries($).map(([U,J])=>({label:G_(U,J),description:J.description})))}function tN($,U){return`Usage: ${$} ${U.name}${U.usage?` ${U.usage}`:""}`}function Q_($){return JSON.stringify(Object.entries($).map(([U,J])=>[U,J.type,J.short??"",J.description,J.placeholder??"",J.default??""]).sort((U,J)=>String(U[0]).localeCompare(String(J[0]))))}function X_($){let U=[],J=new Map;for(let I of $){let Q=I.flags??{};if(Object.keys(Q).length===0)continue;let X=Q_(Q),O=J.get(X);if(O){O.names.push(I.name);continue}let q={names:[I.name],flags:Q};J.set(X,q),U.push(q)}let G=[];for(let I of U)G.push("",`${I.names.join(" / ")} options:`),G.push(...aN(I.flags));return G}function eN($){let U=[$.intro,"",`Usage: ${$.cliName} ${$.usage??"<command> [args]"}`,"","Commands:",...J_($.commands)];if($.globalFlags&&Object.keys($.globalFlags).length>0)U.push("","Options:",...aN($.globalFlags));return U.push(...X_($.commands)),U.join(`
-`)}function sN($){let U=new Map;for(let J of $){if(U.has(J.name))throw Error(`Duplicate command name: ${J.name}`);U.set(J.name,J)}return U}function r$($,U){let J=$[U];return typeof J==="string"?J:void 0}function S4($,U){let J=$[U];return typeof J==="boolean"?J:void 0}var L4={name:"@rizom/ops",version:"0.2.0-alpha.311",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as lS,mkdirSync as dS,readFileSync as zw,writeFileSync as Yw}from"fs";import{dirname as nS,join as JR}from"path";function Tq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function h$($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function $0($,U,J=""){let G=Tq($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function mU($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(h$($.outputLen),h$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function hJ($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function C4($,U){$0($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function E4($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function H0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function lJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function IU($,U){return $<<32-U|$>>>U}function P$($,U){return $<<U|$>>>32-U>>>0}var q_=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function D_($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function w_($){for(let U=0;U<$.length;U++)$[U]=D_($[U]);return $}var Kq=q_?($)=>$:w_,U7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),z_=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function f4($){if($0($),U7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=z_[$[J]];return U}var FU={_0:48,_9:57,A:65,F:70,a:97,f:102};function $7($){if($>=FU._0&&$<=FU._9)return $-FU._0;if($>=FU.A&&$<=FU.F)return $-(FU.A-10);if($>=FU.a&&$<=FU.f)return $-(FU.a-10);return}function Y8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(U7)try{return Uint8Array.fromHex($)}catch(I){if(I instanceof SyntaxError)throw RangeError(I.message);throw I}let U=$.length,J=U/2;if(U%2)throw RangeError("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=$7($.charCodeAt(Q)),O=$7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw RangeError('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function Y_($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Aq($,U=""){if(typeof $==="string")return Y_($);return $0($,void 0,U)}function Pq(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];$0(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function b4($,U){if(U!==void 0&&{}.toString.call(U)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,U)}function _q($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function xU($=32){h$($,"bytesLength");let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return U.getRandomValues(new Uint8Array($))}var Bq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Sq{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,U){if(mU($),$0(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),H0(G)}update($){return hJ(this),this.iHash.update($),this}digestInto($){hJ(this),C4($,this),this.finished=!0;let U=$.subarray(0,this.outputLen);this.iHash.digestInto(U),this.oHash.update(U),this.oHash.digestInto(U),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var WU=(()=>{let $=(U,J,G)=>new Sq(U,J).update(G).digest();return $.create=(U,J)=>new Sq(U,J),$})();function v8($,U,J){if(mU($),J===void 0)J=new Uint8Array($.outputLen);return WU($,J,U)}var Lq=Uint8Array.of(0),I7=Uint8Array.of();function Cq($,U,J,G=32){mU($),h$(G,"length"),$0(U,void 0,"prk");let I=$.outputLen;if(U.length<I)throw Error('"prk" must be at least HashLen octets');if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=I7;else $0(J,void 0,"info");let X=new Uint8Array(Q*I),O=WU.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let w=0;w<Q;w++)Lq[0]=w+1,q.update(w===0?I7:D).update(J).update(Lq).digestInto(D),X.set(D,I*w),O._cloneInto(q);return O.destroy(),q.destroy(),H0(D,Lq),X.slice(0,G)}var OI=($,U,J,G,I)=>Cq($,v8($,U,J),G,I);function J7($,U,J){return $&U^~$&J}function G7($,U,J){return $&U^$&J^U&J}class k4{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=lJ(this.buffer)}update($){hJ(this),$0($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=lJ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){hJ(this),C4($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,H0(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let w=Q;w<G;w++)U[w]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=lJ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let w=0;w<q;w++)X.setUint32(4*w,D[w],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var yU=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),rU=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),U0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),I0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var u4=BigInt(4294967295),Q7=BigInt(32);function v_($,U=!1){if(U)return{h:Number($&u4),l:Number($>>Q7&u4)};return{h:Number($>>Q7&u4)|0,l:Number($&u4)|0}}function X7($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=v_($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var Eq=($,U,J)=>$>>>J,fq=($,U,J)=>$<<32-J|U>>>J,cI=($,U,J)=>$>>>J|U<<32-J,pI=($,U,J)=>$<<32-J|U>>>J,W8=($,U,J)=>$<<64-J|U>>>J-32,g8=($,U,J)=>$>>>J-32|U<<64-J;function gU($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var O7=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),q7=($,U,J,G)=>U+J+G+($/4294967296|0)|0,D7=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),w7=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,z7=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),Y7=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var g_=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),qI=new Uint32Array(64);class bq extends k4{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let w=0;w<16;w++,U+=4)qI[w]=$.getUint32(U,!1);for(let w=16;w<64;w++){let Y=qI[w-15],v=qI[w-2],W=IU(Y,7)^IU(Y,18)^Y>>>3,N=IU(v,17)^IU(v,19)^v>>>10;qI[w]=N+qI[w-7]+W+qI[w-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let w=0;w<64;w++){let Y=IU(X,6)^IU(X,11)^IU(X,25),v=D+Y+J7(X,O,q)+g_[w]+qI[w]|0,N=(IU(J,2)^IU(J,13)^IU(J,22))+G7(J,G,I)|0;D=q,q=O,O=X,X=Q+v|0,Q=I,I=G,G=J,J=v+N|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){H0(qI)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),H0(this.buffer)}}class v7 extends bq{A=yU[0]|0;B=yU[1]|0;C=yU[2]|0;D=yU[3]|0;E=yU[4]|0;F=yU[5]|0;G=yU[6]|0;H=yU[7]|0;constructor(){super(32)}}class V_ extends bq{A=rU[0]|0;B=rU[1]|0;C=rU[2]|0;D=rU[3]|0;E=rU[4]|0;F=rU[5]|0;G=rU[6]|0;H=rU[7]|0;constructor(){super(28)}}var W7=(()=>X7(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),N_=(()=>W7[0])(),Z_=(()=>W7[1])(),DI=new Uint32Array(80),wI=new Uint32Array(80);class V8 extends k4{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:w,Fl:Y,Gh:v,Gl:W,Hh:N,Hl:g}=this;return[$,U,J,G,I,Q,X,O,q,D,w,Y,v,W,N,g]}set($,U,J,G,I,Q,X,O,q,D,w,Y,v,W,N,g){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=w|0,this.Fl=Y|0,this.Gh=v|0,this.Gl=W|0,this.Hh=N|0,this.Hl=g|0}process($,U){for(let H=0;H<16;H++,U+=4)DI[H]=$.getUint32(U),wI[H]=$.getUint32(U+=4);for(let H=16;H<80;H++){let S=DI[H-15]|0,B=wI[H-15]|0,k=cI(S,B,1)^cI(S,B,8)^Eq(S,B,7),m=pI(S,B,1)^pI(S,B,8)^fq(S,B,7),h=DI[H-2]|0,_=wI[H-2]|0,x=cI(h,_,19)^W8(h,_,61)^Eq(h,_,6),t=pI(h,_,19)^g8(h,_,61)^fq(h,_,6),C=D7(m,t,wI[H-7],wI[H-16]),A=w7(C,k,x,DI[H-7],DI[H-16]);DI[H]=A|0,wI[H]=C|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:w,El:Y,Fh:v,Fl:W,Gh:N,Gl:g,Hh:V,Hl:j}=this;for(let H=0;H<80;H++){let S=cI(w,Y,14)^cI(w,Y,18)^W8(w,Y,41),B=pI(w,Y,14)^pI(w,Y,18)^g8(w,Y,41),k=w&v^~w&N,m=Y&W^~Y&g,h=z7(j,B,m,Z_[H],wI[H]),_=Y7(h,V,S,k,N_[H],DI[H]),x=h|0,t=cI(J,G,28)^W8(J,G,34)^W8(J,G,39),C=pI(J,G,28)^g8(J,G,34)^g8(J,G,39),A=J&I^J&X^I&X,E=G&Q^G&O^Q&O;V=N|0,j=g|0,N=v|0,g=W|0,v=w|0,W=Y|0,{h:w,l:Y}=gU(q|0,D|0,_|0,x|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=O7(x,C,E);J=q7(M,_,t,A),G=M|0}({h:J,l:G}=gU(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=gU(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=gU(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=gU(this.Dh|0,this.Dl|0,q|0,D|0),{h:w,l:Y}=gU(this.Eh|0,this.El|0,w|0,Y|0),{h:v,l:W}=gU(this.Fh|0,this.Fl|0,v|0,W|0),{h:N,l:g}=gU(this.Gh|0,this.Gl|0,N|0,g|0),{h:V,l:j}=gU(this.Hh|0,this.Hl|0,V|0,j|0),this.set(J,G,I,Q,X,O,q,D,w,Y,v,W,N,g,V,j)}roundClean(){H0(DI,wI)}destroy(){this.destroyed=!0,H0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class g7 extends V8{Ah=I0[0]|0;Al=I0[1]|0;Bh=I0[2]|0;Bl=I0[3]|0;Ch=I0[4]|0;Cl=I0[5]|0;Dh=I0[6]|0;Dl=I0[7]|0;Eh=I0[8]|0;El=I0[9]|0;Fh=I0[10]|0;Fl=I0[11]|0;Gh=I0[12]|0;Gl=I0[13]|0;Hh=I0[14]|0;Hl=I0[15]|0;constructor(){super(64)}}class R_ extends V8{Ah=U0[0]|0;Al=U0[1]|0;Bh=U0[2]|0;Bl=U0[3]|0;Ch=U0[4]|0;Cl=U0[5]|0;Dh=U0[6]|0;Dl=U0[7]|0;Eh=U0[8]|0;El=U0[9]|0;Fh=U0[10]|0;Fl=U0[11]|0;Gh=U0[12]|0;Gl=U0[13]|0;Hh=U0[14]|0;Hl=U0[15]|0;constructor(){super(48)}}var z0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Y0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class M_ extends V8{Ah=z0[0]|0;Al=z0[1]|0;Bh=z0[2]|0;Bl=z0[3]|0;Ch=z0[4]|0;Cl=z0[5]|0;Dh=z0[6]|0;Dl=z0[7]|0;Eh=z0[8]|0;El=z0[9]|0;Fh=z0[10]|0;Fl=z0[11]|0;Gh=z0[12]|0;Gl=z0[13]|0;Hh=z0[14]|0;Hl=z0[15]|0;constructor(){super(28)}}class H_ extends V8{Ah=Y0[0]|0;Al=Y0[1]|0;Bh=Y0[2]|0;Bl=Y0[3]|0;Ch=Y0[4]|0;Cl=Y0[5]|0;Dh=Y0[6]|0;Dl=Y0[7]|0;Eh=Y0[8]|0;El=Y0[9]|0;Fh=Y0[10]|0;Fl=Y0[11]|0;Gh=Y0[12]|0;Gl=Y0[13]|0;Hh=Y0[14]|0;Hl=Y0[15]|0;constructor(){super(32)}}var l$=_q(()=>new v7,Bq(1));var F4=_q(()=>new g7,Bq(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function h4($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Fq($){if(!h4($))throw TypeError("Uint8Array expected")}function M7($,U){if(!Array.isArray(U))return!1;if(U.length===0)return!0;if($)return U.every((J)=>typeof J==="string");else return U.every((J)=>Number.isSafeInteger(J))}function H7($){if(typeof $!=="function")throw TypeError("function expected");return!0}function zI($,U){if(typeof U!=="string")throw TypeError(`${$}: string expected`);return!0}function Z8($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function x4($){if(!Array.isArray($))throw TypeError("array expected")}function y4($,U){if(!M7(!0,U))throw TypeError(`${$}: array of strings expected`)}function mq($,U){if(!M7(!1,U))throw TypeError(`${$}: array of numbers expected`)}function m0(...$){let U=(Q)=>Q,J=(Q,X)=>(O)=>Q(X(O)),G=$.map((Q)=>Q.encode).reduceRight(J,U),I=$.map((Q)=>Q.decode).reduce(J,U);return{encode:G,decode:I}}function x0($){let U=typeof $==="string"?$.split(""):$,J=U.length;y4("alphabet",U);let G=new Map(U.map((I,Q)=>[I,Q]));return{encode:(I)=>{return x4(I),I.map((Q)=>{if(!Number.isSafeInteger(Q)||Q<0||Q>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Q}". Allowed: ${$}`);return U[Q]})},decode:(I)=>{return x4(I),I.map((Q)=>{zI("alphabet.decode",Q);let X=G.get(Q);if(X===void 0)throw Error(`Unknown letter: "${Q}". Allowed: ${$}`);return X})}}}function y0($=""){return zI("join",$),{encode:(U)=>{return y4("join.decode",U),U.join($)},decode:(U)=>{return zI("join.decode",U),U.split($)}}}function l4($,U="="){return Z8($),zI("padding",U),{encode(J){y4("padding.encode",J);while(J.length*$%8)J.push(U);return J},decode(J){y4("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===U;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function j7($){return H7($),{encode:(U)=>U,decode:(U)=>$(U)}}function V7($,U,J){if(U<2)throw RangeError(`convertRadix: invalid from=${U}, base cannot be less than 2`);if(J<2)throw RangeError(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(x4($),!$.length)return[];let G=0,I=[],Q=Array.from($,(O)=>{if(Z8(O),O<0||O>=U)throw Error(`invalid integer: ${O}`);return O}),X=Q.length;while(!0){let O=0,q=!0;for(let D=G;D<X;D++){let w=Q[D],Y=U*O,v=Y+w;if(!Number.isSafeInteger(v)||Y/U!==O||v-w!==Y)throw Error("convertRadix: carry overflow");let W=v/J;O=v%J;let N=Math.floor(W);if(Q[D]=N,!Number.isSafeInteger(N)||N*J+O!==v)throw Error("convertRadix: carry overflow");if(!q)continue;else if(!N)G=D;else q=!1}if(I.push(O),q)break}for(let O=0;O<$.length-1&&$[O]===0;O++)I.push(0);return I.reverse()}var T7=($,U)=>U===0?$:T7(U,$%U),r4=($,U)=>$+(U-T7($,U)),m4=(()=>{let $=[];for(let U=0;U<40;U++)$.push(2**U);return $})();function kq($,U,J,G){if(x4($),U<=0||U>32)throw RangeError(`convertRadix2: wrong from=${U}`);if(J<=0||J>32)throw RangeError(`convertRadix2: wrong to=${J}`);if(r4(U,J)>32)throw Error(`convertRadix2: carry overflow from=${U} to=${J} carryBits=${r4(U,J)}`);let I=0,Q=0,X=m4[U],O=m4[J]-1,q=[];for(let D of $){if(Z8(D),D>=X)throw Error(`convertRadix2: invalid data word=${D} from=${U}`);if(I=I<<U|D,Q+U>32)throw Error(`convertRadix2: carry overflow pos=${Q} from=${U}`);Q+=U;for(;Q>=J;Q-=J)q.push((I>>Q-J&O)>>>0);let w=m4[Q];if(w===void 0)throw Error("invalid carry");I&=w-1}if(I=I<<J-Q&O,!G&&Q>=U)throw Error("Excess padding");if(!G&&I>0)throw Error(`Non-zero padding: ${I}`);if(G&&Q>0)q.push(I>>>0);return q}function j_($){Z8($);let U=256;return{encode:(J)=>{if(!h4(J))throw TypeError("radix.encode input should be Uint8Array");return V7(Array.from(J),U,$)},decode:(J)=>{return mq("radix.decode",J),Uint8Array.from(V7(J,$,U))}}}function c0($,U=!1){if(Z8($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(r4(8,$)>32||r4($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(J)=>{if(!h4(J))throw TypeError("radix2.encode input should be Uint8Array");return kq(Array.from(J),8,$,!U)},decode:(J)=>{return mq("radix2.decode",J),Uint8Array.from(kq(J,$,8,U))}}}function N7($){return H7($),function(...U){try{return $.apply(null,U)}catch(J){}}}var Nd=Object.freeze(m0(c0(4),x0("0123456789ABCDEF"),y0(""))),Zd=Object.freeze(m0(c0(5),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),l4(5),y0(""))),Rd=Object.freeze(m0(c0(5),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),y0(""))),Md=Object.freeze(m0(c0(5),x0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),l4(5),y0(""))),Hd=Object.freeze(m0(c0(5),x0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),y0(""))),jd=Object.freeze(m0(c0(5),x0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),y0(""),j7(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),K7=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),T_=/[\t\n\f\r ]/,A7=($,U)=>{zI("base64",$);let J=U?"base64url":"base64";if($.length>0&&T_.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:J,lastChunkHandling:"strict"})},xq=Object.freeze(K7?{encode($){return Fq($),$.toBase64()},decode($){return A7($,!1)}}:m0(c0(6),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),l4(6),y0(""))),v0=Object.freeze(m0(c0(6),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),y0(""))),Td=Object.freeze(K7?{encode($){return Fq($),$.toBase64({alphabet:"base64url"})},decode($){return A7($,!0)}}:m0(c0(6),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),l4(6),y0(""))),Kd=Object.freeze(m0(c0(6),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),y0(""))),yq=($)=>m0(j_(58),x0($),y0("")),Ad=Object.freeze(yq("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Pd=Object.freeze(yq("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),_d=Object.freeze(yq("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var uq=m0(x0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),y0("")),Z7=[996825010,642813549,513874426,1027748829,705979059];function N8($){let U=$>>25,J=($&33554431)<<5;for(let G=0;G<Z7.length;G++)if((U>>G&1)===1)J^=Z7[G];return J}function R7($,U,J=1){let G=$.length,I=1;for(let Q=0;Q<G;Q++){let X=$.charCodeAt(Q);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);I=N8(I)^X>>5}I=N8(I);for(let Q=0;Q<G;Q++)I=N8(I)^$.charCodeAt(Q)&31;for(let Q of U)I=N8(I)^Q;for(let Q=0;Q<6;Q++)I=N8(I);return I^=J,uq.encode(kq([I%m4[30]],30,5,!1))}function P7($){let U=$==="bech32"?1:734539939,J=c0(5),G=J.decode,I=J.encode,Q=N7(G);function X(Y,v,W=90){if(zI("bech32.encode prefix",Y),h4(v))v=Array.from(v);mq("bech32.encode",v);let N=Y.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let g=N+7+v.length;if(W!==!1&&g>W)throw TypeError(`Length ${g} exceeds limit ${W}`);let V=Y.toLowerCase(),j=R7(V,v,U);return`${V}1${uq.encode(v)}${j}`}function O(Y,v=90){zI("bech32.decode input",Y);let W=Y.length;if(W<8||v!==!1&&W>v)throw TypeError(`invalid string length: ${W} (${Y}). Expected (8..${v})`);let N=Y.toLowerCase();if(Y!==N&&Y!==Y.toUpperCase())throw Error("String must be lowercase or uppercase");let g=N.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let V=N.slice(0,g),j=N.slice(g+1);if(j.length<6)throw Error("Data must be at least 6 characters long");let H=uq.decode(j).slice(0,-6),S=R7(V,H,U);if(!j.endsWith(S))throw Error(`Invalid checksum in ${Y}: expected "${S}"`);return{prefix:V,words:H}}let q=N7(O);function D(Y){let{prefix:v,words:W}=O(Y,!1);return{prefix:v,words:W,bytes:G(W)}}function w(Y,v){return X(Y,I(v))}return{encode:X,decode:O,encodeFromBytes:w,decodeToBytes:D,decodeUnsafe:q,fromWords:G,fromWordsUnsafe:Q,toWords:I}}var r0=Object.freeze(P7("bech32")),Bd=Object.freeze(P7("bech32m"));var K_=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),A_={encode($){return Fq($),$.toHex()},decode($){return zI("hex",$),Uint8Array.fromHex($)}},Sd=Object.freeze(K_?A_:m0(c0(4),x0("0123456789abcdef"),y0(""),j7(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function __($,U,J,G){mU($);let I=b4({dkLen:32,asyncTick:10},G),{c:Q,dkLen:X,asyncTick:O}=I;if(h$(Q,"c"),h$(X,"dkLen"),h$(O,"asyncTick"),Q<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let q=Aq(U,"password"),D=Aq(J,"salt"),w=new Uint8Array(X),Y=WU.create($,q),v=Y._cloneInto().update(D);return{c:Q,dkLen:X,asyncTick:O,DK:w,PRF:Y,PRFSalt:v}}function B_($,U,J,G,I){if($.destroy(),U.destroy(),G)G.destroy();return H0(I),J}function rq($,U,J,G){let{c:I,dkLen:Q,DK:X,PRF:O,PRFSalt:q}=__($,U,J,G),D,w=new Uint8Array(4),Y=lJ(w),v=new Uint8Array(O.outputLen);for(let W=1,N=0;N<Q;W++,N+=O.outputLen){let g=X.subarray(N,N+O.outputLen);Y.setInt32(0,W,!1),(D=q._cloneInto(D)).update(w).digestInto(v),g.set(v.subarray(0,g.length));for(let V=1;V<I;V++){O._cloneInto(D).update(v).digestInto(v);for(let j=0;j<g.length;j++)g[j]^=v[j]}}return B_(O,q,X,D,v)}function _7($,U,J,G,I,Q){let X=$[U++]^J[G++],O=$[U++]^J[G++],q=$[U++]^J[G++],D=$[U++]^J[G++],w=$[U++]^J[G++],Y=$[U++]^J[G++],v=$[U++]^J[G++],W=$[U++]^J[G++],N=$[U++]^J[G++],g=$[U++]^J[G++],V=$[U++]^J[G++],j=$[U++]^J[G++],H=$[U++]^J[G++],S=$[U++]^J[G++],B=$[U++]^J[G++],k=$[U++]^J[G++],m=X,h=O,_=q,x=D,t=w,C=Y,A=v,E=W,M=N,K=g,T=V,f=j,P=H,u=S,y=B,n=k;for(let U$=0;U$<8;U$+=2)t^=P$(m+P|0,7),M^=P$(t+m|0,9),P^=P$(M+t|0,13),m^=P$(P+M|0,18),K^=P$(C+h|0,7),u^=P$(K+C|0,9),h^=P$(u+K|0,13),C^=P$(h+u|0,18),y^=P$(T+A|0,7),_^=P$(y+T|0,9),A^=P$(_+y|0,13),T^=P$(A+_|0,18),x^=P$(n+f|0,7),E^=P$(x+n|0,9),f^=P$(E+x|0,13),n^=P$(f+E|0,18),h^=P$(m+x|0,7),_^=P$(h+m|0,9),x^=P$(_+h|0,13),m^=P$(x+_|0,18),A^=P$(C+t|0,7),E^=P$(A+C|0,9),t^=P$(E+A|0,13),C^=P$(t+E|0,18),f^=P$(T+K|0,7),M^=P$(f+T|0,9),K^=P$(M+f|0,13),T^=P$(K+M|0,18),P^=P$(n+y|0,7),u^=P$(P+n|0,9),y^=P$(u+P|0,13),n^=P$(y+u|0,18);I[Q++]=X+m|0,I[Q++]=O+h|0,I[Q++]=q+_|0,I[Q++]=D+x|0,I[Q++]=w+t|0,I[Q++]=Y+C|0,I[Q++]=v+A|0,I[Q++]=W+E|0,I[Q++]=N+M|0,I[Q++]=g+K|0,I[Q++]=V+T|0,I[Q++]=j+f|0,I[Q++]=H+P|0,I[Q++]=S+u|0,I[Q++]=B+y|0,I[Q++]=k+n|0}function hq($,U,J,G,I){let Q=G+0,X=G+16*I;for(let O=0;O<16;O++)J[X+O]=$[U+(2*I-1)*16+O];for(let O=0;O<I;O++,Q+=16,U+=16){if(_7(J,X,$,U,J,Q),O>0)X+=16;_7(J,Q,$,U+=16,J,X)}}function S_($,U,J){let G=b4({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:I,r:Q,p:X,dkLen:O,asyncTick:q,maxmem:D,onProgress:w}=G;if(h$(I,"N"),h$(Q,"r"),h$(X,"p"),h$(O,"dkLen"),h$(q,"asyncTick"),h$(D,"maxmem"),w!==void 0&&typeof w!=="function")throw Error("progressCb must be a function");let Y=128*Q,v=Y/4,W=Math.pow(2,32);if(I<=1||(I&I-1)!==0||I>W)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(W-1)*32/Y)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(O<1||O>(W-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=Y*(I+X+1);if(N>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+D);let g=rq(l$,$,U,{c:1,dkLen:Y*X}),V=E4(g),j=E4(new Uint8Array(Y*I)),H=E4(new Uint8Array(Y)),S=()=>{};if(w){let B=2*I*X,k=Math.max(Math.floor(B/1e4),1),m=0;S=()=>{if(m++,w&&(!(m%k)||m===B))w(m/B)}}return{N:I,r:Q,p:X,dkLen:O,blockSize32:v,V:j,B32:V,B:g,tmp:H,blockMixCb:S,asyncTick:q}}function L_($,U,J,G,I){let Q=rq(l$,$,J,{c:1,dkLen:U});return H0(J,G,I),Q}function lq($,U,J){let{N:G,r:I,p:Q,dkLen:X,blockSize32:O,V:q,B32:D,B:w,tmp:Y,blockMixCb:v}=S_($,U,J);Kq(D);for(let W=0;W<Q;W++){let N=O*W;for(let g=0;g<O;g++)q[g]=D[N+g];for(let g=0,V=0;g<G-1;g++)hq(q,V,q,V+=O,I),v();hq(q,(G-1)*O,D,N,I),v();for(let g=0;g<G;g++){let V=(D[N+O-16]&G-1)>>>0;for(let j=0;j<O;j++)Y[j]=D[N+j]^q[V*O+j];hq(Y,0,D,N,I),v()}}return Kq(D),L_($,X,w,q,Y)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function C_($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function d4($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function dJ($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function c$($,U,J=""){let G=C_($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function dq($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function B7($,U,J=!1){c$($,void 0,"output");let G=U.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!nJ($))throw Error("invalid output, must be aligned")}function VU($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function JU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function E_($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var oI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),f_=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var b_=($)=>{for(let U=0;U<$.length;U++)$[U]=f_($[U]);return $},hU=oI?($)=>$:b_;function S7($,U){if(U==null||typeof U!=="object")throw Error("options must be defined");return Object.assign($,U)}function L7($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function C7($,U,J){let G=U,I=J||(()=>[]),Q=(O,q)=>G(q,...I(O)).update(O).digest(),X=G(new Uint8Array($),...I(new Uint8Array(0)));return Q.outputLen=X.outputLen,Q.blockLen=X.blockLen,Q.create=(O,...q)=>G(O,...q),Q}var E7=($,U)=>{function J(G,...I){if(c$(G,void 0,"key"),$.nonceLength!==void 0){let w=I[0];c$(w,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Q=$.tagLength;if(Q&&I[1]!==void 0)c$(I[1],void 0,"AAD");let X=U(G,...I),O=(w,Y)=>{if(Y!==void 0){if(w!==2)throw Error("cipher output not supported");c$(Y,void 0,"output")}},q=!1;return{encrypt(w,Y){if(q)throw Error("cannot encrypt() twice with same key + nonce");return q=!0,c$(w),O(X.encrypt.length,Y),X.encrypt(w,Y)},decrypt(w,Y){if(c$(w),Q&&w.length<Q)throw Error('"ciphertext" expected length bigger than tagLength='+Q);return O(X.decrypt.length,Y),X.decrypt(w,Y)}}}return Object.assign(J,$),J};function R8($,U,J=!0){if(U===void 0)return new Uint8Array($);if(c$(U,void 0,"output"),U.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+U.length);if(J&&!nJ(U))throw Error("invalid output, must be aligned");return U}function f7($,U,J){dJ($),dJ(U),d4(J);let G=new Uint8Array(16),I=E_(G);return I.setBigUint64(0,BigInt(U),J),I.setBigUint64(8,BigInt($),J),G}function nJ($){return $.byteOffset%4===0}function iJ($){return Uint8Array.from(c$($))}var k7=($)=>Uint8Array.from($.split(""),(U)=>U.charCodeAt(0)),k_=(()=>hU(VU(k7("expand 16-byte k"))))(),u_=(()=>hU(VU(k7("expand 32-byte k"))))();function _$($,U){return $<<U|$>>>32-U}var M8=64,F_=16,nq=(()=>4294967295)(),b7=Uint32Array.of();function m_($,U,J,G,I,Q,X,O){let q=I.length,D=new Uint8Array(M8),w=VU(D),Y=oI&&nJ(I)&&nJ(Q),v=Y?VU(I):b7,W=Y?VU(Q):b7;if(!oI){for(let N=0;N<q;X++){if($(U,J,G,w,X,O),hU(w),X>=nq)throw Error("arx: counter overflow");let g=Math.min(M8,q-N);for(let V=0,j;V<g;V++)j=N+V,Q[j]=I[j]^D[V];N+=g}return}for(let N=0;N<q;X++){if($(U,J,G,w,X,O),X>=nq)throw Error("arx: counter overflow");let g=Math.min(M8,q-N);if(Y&&g===M8){let V=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let j=0,H;j<F_;j++)H=V+j,W[H]=v[H]^w[j];N+=M8;continue}for(let V=0,j;V<g;V++)j=N+V,Q[j]=I[j]^D[V];N+=g}}function u7($,U){let{allowShortKeys:J,extendNonceFn:G,counterLength:I,counterRight:Q,rounds:X}=S7({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},U);if(typeof $!=="function")throw Error("core must be a function");return dJ(I),dJ(X),d4(Q),d4(J),(O,q,D,w,Y=0)=>{c$(O,void 0,"key"),c$(q,void 0,"nonce"),c$(D,void 0,"data");let v=D.length;if(w=R8(v,w,!1),dJ(Y),Y<0||Y>=nq)throw Error("arx: counter overflow");let W=[],N=O.length,g,V;if(N===32)W.push(g=iJ(O)),V=u_;else if(N===16&&J)g=new Uint8Array(32),g.set(O),g.set(O,16),V=k_,W.push(g);else throw c$(O,32,"arx key"),Error("invalid key size");if(!oI||!nJ(q))W.push(q=iJ(q));let j=VU(g);if(G){if(q.length!==24)throw Error("arx: extended nonce must be 24 bytes");let B=q.subarray(0,16);if(oI)G(V,j,VU(B),j);else{let k=hU(Uint32Array.from(V));G(k,j,VU(B),j),JU(k),hU(j)}q=q.subarray(16)}else if(!oI)hU(j);let H=16-I;if(H!==q.length)throw Error(`arx: nonce must be ${H} or 16 bytes`);if(H!==12){let B=new Uint8Array(12);B.set(q,Q?0:12-q.length),q=B,W.push(q)}let S=hU(VU(q));try{return m_($,V,j,S,D,w,Y,X),w}finally{JU(...W)}}}function J0($,U){return $[U++]&255|($[U++]&255)<<8}class F7{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=iJ(c$($,32,"key"));let U=J0($,0),J=J0($,2),G=J0($,4),I=J0($,6),Q=J0($,8),X=J0($,10),O=J0($,12),q=J0($,14);this.r[0]=U&8191,this.r[1]=(U>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|I<<9)&8191,this.r[4]=(I>>>4|Q<<12)&255,this.r[5]=Q>>>1&8190,this.r[6]=(Q>>>14|X<<2)&8191,this.r[7]=(X>>>11|O<<5)&8065,this.r[8]=(O>>>8|q<<8)&8191,this.r[9]=q>>>5&127;for(let D=0;D<8;D++)this.pad[D]=J0($,16+2*D)}process($,U,J=!1){let G=J?0:2048,{h:I,r:Q}=this,X=Q[0],O=Q[1],q=Q[2],D=Q[3],w=Q[4],Y=Q[5],v=Q[6],W=Q[7],N=Q[8],g=Q[9],V=J0($,U+0),j=J0($,U+2),H=J0($,U+4),S=J0($,U+6),B=J0($,U+8),k=J0($,U+10),m=J0($,U+12),h=J0($,U+14),_=I[0]+(V&8191),x=I[1]+((V>>>13|j<<3)&8191),t=I[2]+((j>>>10|H<<6)&8191),C=I[3]+((H>>>7|S<<9)&8191),A=I[4]+((S>>>4|B<<12)&8191),E=I[5]+(B>>>1&8191),M=I[6]+((B>>>14|k<<2)&8191),K=I[7]+((k>>>11|m<<5)&8191),T=I[8]+((m>>>8|h<<8)&8191),f=I[9]+(h>>>5|G),P=0,u=P+_*X+x*(5*g)+t*(5*N)+C*(5*W)+A*(5*v);P=u>>>13,u&=8191,u+=E*(5*Y)+M*(5*w)+K*(5*D)+T*(5*q)+f*(5*O),P+=u>>>13,u&=8191;let y=P+_*O+x*X+t*(5*g)+C*(5*N)+A*(5*W);P=y>>>13,y&=8191,y+=E*(5*v)+M*(5*Y)+K*(5*w)+T*(5*D)+f*(5*q),P+=y>>>13,y&=8191;let n=P+_*q+x*O+t*X+C*(5*g)+A*(5*N);P=n>>>13,n&=8191,n+=E*(5*W)+M*(5*v)+K*(5*Y)+T*(5*w)+f*(5*D),P+=n>>>13,n&=8191;let U$=P+_*D+x*q+t*O+C*X+A*(5*g);P=U$>>>13,U$&=8191,U$+=E*(5*N)+M*(5*W)+K*(5*v)+T*(5*Y)+f*(5*w),P+=U$>>>13,U$&=8191;let X$=P+_*w+x*D+t*q+C*O+A*X;P=X$>>>13,X$&=8191,X$+=E*(5*g)+M*(5*N)+K*(5*W)+T*(5*v)+f*(5*Y),P+=X$>>>13,X$&=8191;let q$=P+_*Y+x*w+t*D+C*q+A*O;P=q$>>>13,q$&=8191,q$+=E*X+M*(5*g)+K*(5*N)+T*(5*W)+f*(5*v),P+=q$>>>13,q$&=8191;let Y$=P+_*v+x*Y+t*w+C*D+A*q;P=Y$>>>13,Y$&=8191,Y$+=E*O+M*X+K*(5*g)+T*(5*N)+f*(5*W),P+=Y$>>>13,Y$&=8191;let V$=P+_*W+x*v+t*Y+C*w+A*D;P=V$>>>13,V$&=8191,V$+=E*q+M*O+K*X+T*(5*g)+f*(5*N),P+=V$>>>13,V$&=8191;let W$=P+_*N+x*W+t*v+C*Y+A*w;P=W$>>>13,W$&=8191,W$+=E*D+M*q+K*O+T*X+f*(5*g),P+=W$>>>13,W$&=8191;let g$=P+_*g+x*N+t*W+C*v+A*Y;P=g$>>>13,g$&=8191,g$+=E*w+M*D+K*q+T*O+f*X,P+=g$>>>13,g$&=8191,P=(P<<2)+P|0,P=P+u|0,u=P&8191,P=P>>>13,y+=P,I[0]=u,I[1]=y,I[2]=n,I[3]=U$,I[4]=X$,I[5]=q$,I[6]=Y$,I[7]=V$,I[8]=W$,I[9]=g$}finalize(){let{h:$,pad:U}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let I=(G^1)-1;for(let X=0;X<10;X++)J[X]&=I;I=~I;for(let X=0;X<10;X++)$[X]=$[X]&I|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Q=$[0]+U[0];$[0]=Q&65535;for(let X=1;X<8;X++)Q=($[X]+U[X]|0)+(Q>>>16)|0,$[X]=Q&65535;JU(J)}update($){dq(this),c$($),$=iJ($);let{buffer:U,blockLen:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(J-this.pos,G-I);if(Q===J){for(;J<=G-I;I+=J)this.process($,I);continue}if(U.set($.subarray(I,I+Q),this.pos),this.pos+=Q,I+=Q,this.pos===J)this.process(U,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,JU(this.h,this.r,this.buffer,this.pad)}digestInto($){dq(this),B7($,this),this.finished=!0;let{buffer:U,h:J}=this,{pos:G}=this;if(G){U[G++]=1;for(;G<16;G++)U[G]=0;this.process(U,0,!0)}this.finalize();let I=0;for(let Q=0;Q<8;Q++)$[I++]=J[Q]>>>0,$[I++]=J[Q]>>>8}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}}var m7=C7(32,($)=>new F7($));function x_($,U,J,G,I,Q=20){let X=$[0],O=$[1],q=$[2],D=$[3],w=U[0],Y=U[1],v=U[2],W=U[3],N=U[4],g=U[5],V=U[6],j=U[7],H=I,S=J[0],B=J[1],k=J[2],m=X,h=O,_=q,x=D,t=w,C=Y,A=v,E=W,M=N,K=g,T=V,f=j,P=H,u=S,y=B,n=k;for(let X$=0;X$<Q;X$+=2)m=m+t|0,P=_$(P^m,16),M=M+P|0,t=_$(t^M,12),m=m+t|0,P=_$(P^m,8),M=M+P|0,t=_$(t^M,7),h=h+C|0,u=_$(u^h,16),K=K+u|0,C=_$(C^K,12),h=h+C|0,u=_$(u^h,8),K=K+u|0,C=_$(C^K,7),_=_+A|0,y=_$(y^_,16),T=T+y|0,A=_$(A^T,12),_=_+A|0,y=_$(y^_,8),T=T+y|0,A=_$(A^T,7),x=x+E|0,n=_$(n^x,16),f=f+n|0,E=_$(E^f,12),x=x+E|0,n=_$(n^x,8),f=f+n|0,E=_$(E^f,7),m=m+C|0,n=_$(n^m,16),T=T+n|0,C=_$(C^T,12),m=m+C|0,n=_$(n^m,8),T=T+n|0,C=_$(C^T,7),h=h+A|0,P=_$(P^h,16),f=f+P|0,A=_$(A^f,12),h=h+A|0,P=_$(P^h,8),f=f+P|0,A=_$(A^f,7),_=_+E|0,u=_$(u^_,16),M=M+u|0,E=_$(E^M,12),_=_+E|0,u=_$(u^_,8),M=M+u|0,E=_$(E^M,7),x=x+t|0,y=_$(y^x,16),K=K+y|0,t=_$(t^K,12),x=x+t|0,y=_$(y^x,8),K=K+y|0,t=_$(t^K,7);let U$=0;G[U$++]=X+m|0,G[U$++]=O+h|0,G[U$++]=q+_|0,G[U$++]=D+x|0,G[U$++]=w+t|0,G[U$++]=Y+C|0,G[U$++]=v+A|0,G[U$++]=W+E|0,G[U$++]=N+M|0,G[U$++]=g+K|0,G[U$++]=V+T|0,G[U$++]=j+f|0,G[U$++]=H+P|0,G[U$++]=S+u|0,G[U$++]=B+y|0,G[U$++]=k+n|0}var y_=u7(x_,{counterRight:!1,counterLength:4,allowShortKeys:!1});var r_=new Uint8Array(16),x7=($,U)=>{$.update(U);let J=U.length%16;if(J)$.update(r_.subarray(J))},h_=new Uint8Array(32);function y7($,U,J,G,I){if(I!==void 0)c$(I,void 0,"AAD");let Q=$(U,J,h_),X=f7(G.length,I?I.length:0,!0),O=m7.create(Q);if(I)x7(O,I);x7(O,G),O.update(X);let q=O.digest();return JU(Q,X),q}var l_=($)=>(U,J,G)=>{return{encrypt(Q,X){let O=Q.length;X=R8(O+16,X,!1),X.set(Q);let q=X.subarray(0,-16);$(U,J,q,q,1);let D=y7($,U,J,q,G);return X.set(D,O),JU(D),X},decrypt(Q,X){X=R8(Q.length-16,X,!1);let O=Q.subarray(0,-16),q=Q.subarray(-16),D=y7($,U,J,O,G);if(!L7(q,D))throw JU(D),Error("invalid tag");return X.set(Q.subarray(0,-16)),$(U,J,X,X,1),JU(D),X}}},p0=E7({blockSize:64,nonceLength:12,tagLength:16},l_(y_));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function cJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function t$($,U=""){if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Z$($,U,J=""){let G=cJ($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+O+", got "+q)}return $}function o0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");t$($.outputLen),t$($.blockLen)}function dU($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function n4($,U){Z$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function i4($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function E0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function c4($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function GU($,U){return $<<32-U|$>>>U}var d_=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function n_($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function i_($){for(let U=0;U<$.length;U++)$[U]=n_($[U]);return $}var iq=d_?($)=>$:i_,h7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),c_=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function aI($){if(Z$($),h7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=c_[$[J]];return U}var lU={_0:48,_9:57,A:65,F:70,a:97,f:102};function r7($){if($>=lU._0&&$<=lU._9)return $-lU._0;if($>=lU.A&&$<=lU.F)return $-(lU.A-10);if($>=lU.a&&$<=lU.f)return $-(lU.a-10);return}function tI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(h7)return Uint8Array.fromHex($);let U=$.length,J=U/2;if(U%2)throw Error("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=r7($.charCodeAt(Q)),O=r7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw Error('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function d$(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];Z$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function pJ($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function YI($=32){let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return U.getRandomValues(new Uint8Array($))}var vI=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var pq=BigInt(0),cq=BigInt(1);function H8($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function l7($){if(typeof $==="bigint"){if(!p4($))throw Error("positive bigint expected, got "+$)}else t$($);return $}function j8($){let U=l7($).toString(16);return U.length&1?"0"+U:U}function d7($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?pq:BigInt("0x"+$)}function WI($){return d7(aI($))}function gI($){return d7(aI(o4(Z$($)).reverse()))}function oJ($,U){t$(U),$=l7($);let J=tI($.toString(16).padStart(U*2,"0"));if(J.length!==U)throw Error("number too large");return J}function T8($,U){return oJ($,U).reverse()}function o4($){return Uint8Array.from($)}function VI($){return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var p4=($)=>typeof $==="bigint"&&pq<=$;function p_($,U,J){return p4($)&&p4(U)&&p4(J)&&U<=$&&$<J}function K8($,U,J,G){if(!p_(U,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function oq($){let U;for(U=0;$>pq;$>>=cq,U+=1);return U}var A8=($)=>(cq<<BigInt($))-cq;function n7($,U,J){if(t$($,"hashLen"),t$(U,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(V)=>new Uint8Array(V),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),w=0,Y=()=>{q.fill(1),D.fill(0),w=0},v=(...V)=>J(D,d$(q,...V)),W=(V=I)=>{if(D=v(Q,V),q=v(),V.length===0)return;D=v(X,V),q=v()},N=()=>{if(w++>=O)throw Error("drbg: tried max amount of iterations");let V=0,j=[];while(V<U){q=v();let H=q.slice();j.push(H),V+=q.length}return d$(...j)};return(V,j)=>{Y(),W(V);let H=void 0;while(!(H=j(N())))W();return Y(),H}}function eI($,U={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Q,X,O){let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw Error(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}function aq($){let U=new WeakMap;return(J,...G)=>{let I=U.get(J);if(I!==void 0)return I;let Q=$(J,...G);return U.set(J,Q),Q}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T0=BigInt(0),W0=BigInt(1),sI=BigInt(2),p7=BigInt(3),o7=BigInt(4),a7=BigInt(5),o_=BigInt(7),t7=BigInt(8),a_=BigInt(9),e7=BigInt(16);function j0($,U){let J=$%U;return J>=T0?J:U+J}function a0($,U,J){let G=$;while(U-- >T0)G*=G,G%=J;return G}function i7($,U){if($===T0)throw Error("invert: expected non-zero number");if(U<=T0)throw Error("invert: expected positive modulus, got "+U);let J=j0($,U),G=U,I=T0,Q=W0,X=W0,O=T0;while(J!==T0){let D=G/J,w=G%J,Y=I-X*D,v=Q-O*D;G=J,J=w,I=X,Q=O,X=Y,O=v}if(G!==W0)throw Error("invert: does not exist");return j0(I,U)}function tq($,U,J){if(!$.eql($.sqr(U),J))throw Error("Cannot find square root")}function s7($,U){let J=($.ORDER+W0)/o7,G=$.pow(U,J);return tq($,G,U),G}function t_($,U){let J=($.ORDER-a7)/t7,G=$.mul(U,sI),I=$.pow(G,J),Q=$.mul(U,I),X=$.mul($.mul(Q,sI),I),O=$.mul(Q,$.sub(X,$.ONE));return tq($,O,U),O}function e_($){let U=a4($),J=$Z($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+o_)/e7;return(O,q)=>{let D=O.pow(q,X),w=O.mul(D,G),Y=O.mul(D,I),v=O.mul(D,Q),W=O.eql(O.sqr(w),q),N=O.eql(O.sqr(Y),q);D=O.cmov(D,w,W),w=O.cmov(v,Y,N);let g=O.eql(O.sqr(w),q),V=O.cmov(D,w,g);return tq(O,V,q),V}}function $Z($){if($<p7)throw Error("sqrt is not defined for small field");let U=$-W0,J=0;while(U%sI===T0)U/=sI,J++;let G=sI,I=a4($);while(c7(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return s7;let Q=I.pow(G,U),X=(U+W0)/sI;return function(q,D){if(q.is0(D))return D;if(c7(q,D)!==1)throw Error("Cannot find square root");let w=J,Y=q.mul(q.ONE,Q),v=q.pow(D,U),W=q.pow(D,X);while(!q.eql(v,q.ONE)){if(q.is0(v))return q.ZERO;let N=1,g=q.sqr(v);while(!q.eql(g,q.ONE))if(N++,g=q.sqr(g),N===w)throw Error("Cannot find square root");let V=W0<<BigInt(w-N-1),j=q.pow(Y,V);w=N,Y=q.sqr(j),v=q.mul(v,Y),W=q.mul(W,j)}return W}}function s_($){if($%o7===p7)return s7;if($%t7===a7)return t_;if($%e7===a_)return e_($);return $Z($)}var $B=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function eq($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=$B.reduce((G,I)=>{return G[I]="function",G},U);return eI($,J),$}function UB($,U,J){if(J<T0)throw Error("invalid exponent, negatives unsupported");if(J===T0)return $.ONE;if(J===W0)return U;let G=$.ONE,I=U;while(J>T0){if(J&W0)G=$.mul(G,I);I=$.sqr(I),J>>=W0}return G}function P8($,U,J=!1){let G=Array(U.length).fill(J?$.ZERO:void 0),I=U.reduce((X,O,q)=>{if($.is0(O))return X;return G[q]=X,$.mul(X,O)},$.ONE),Q=$.inv(I);return U.reduceRight((X,O,q)=>{if($.is0(O))return X;return G[q]=$.mul(X,G[q]),$.mul(X,O)},Q),G}function c7($,U){let J=($.ORDER-W0)/sI,G=$.pow(U,J),I=$.eql(G,$.ONE),Q=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!I&&!Q&&!X)throw Error("invalid Legendre symbol result");return I?1:Q?0:-1}function IB($,U){if(U!==void 0)t$(U);let J=U!==void 0?U:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class UZ{ORDER;BITS;BYTES;isLE;ZERO=T0;ONE=W0;_lengths;_sqrt;_mod;constructor($,U={}){if($<=T0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")this.sqrt=U.sqrt;if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=U.allowedLengths?.slice();if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=IB($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,this._sqrt=void 0,Object.preventExtensions(this)}create($){return j0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return T0<=$&&$<this.ORDER}is0($){return $===T0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&W0)===W0}neg($){return j0(-$,this.ORDER)}eql($,U){return $===U}sqr($){return j0($*$,this.ORDER)}add($,U){return j0($+U,this.ORDER)}sub($,U){return j0($-U,this.ORDER)}mul($,U){return j0($*U,this.ORDER)}pow($,U){return UB(this,$,U)}div($,U){return j0($*i7(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return i7($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=s_(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?T8($,this.BYTES):oJ($,this.BYTES)}fromBytes($,U=!1){Z$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?gI($):WI($);if(X)O=j0(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return P8(this,$)}cmov($,U,J){return J?U:$}}function a4($,U={}){return new UZ($,U)}function IZ($){if(typeof $!=="bigint")throw Error("field order must be bigint");let U=$.toString(2).length;return Math.ceil(U/8)}function sq($){let U=IZ($);return U+Math.ceil(U/2)}function JZ($,U,J=!1){Z$($);let G=$.length,I=IZ(U),Q=sq(U);if(G<16||G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?gI($):WI($),O=j0(X,U-W0)+W0;return J?T8(O,I):oJ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aJ=BigInt(0),$J=BigInt(1);function _8($,U){let J=U.negate();return $?J:U}function JD($,U){let J=P8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function OZ($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function $D($,U){OZ($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=A8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function GZ($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=$J;let D=U*G,w=D+Math.abs(O)-1,Y=O===0,v=O<0,W=U%2!==0;return{nextN:q,offset:w,isZero:Y,isNeg:v,isNegF:W,offsetF:D}}var UD=new WeakMap,qZ=new WeakMap;function ID($){return qZ.get($)||1}function QZ($){if($!==aJ)throw Error("invalid wNAF")}class GD{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>aJ){if(U&$J)J=J.add(G);G=G.double(),U>>=$J}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=$D(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=$D($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:w,isNegF:Y,offsetF:v}=GZ(J,X,Q);if(J=O,D)I=I.add(_8(Y,U[v]));else G=G.add(_8(w,U[q]))}return QZ(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=$D($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===aJ)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=GZ(J,Q,I);if(J=X,q)continue;else{let w=U[O];G=G.add(D?w.negate():w)}}return QZ(J),G}getPrecomputes($,U,J){let G=UD.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);UD.set(U,G)}}return G}cached($,U,J){let G=ID($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=ID($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){OZ(U,this.bits),qZ.set($,U),UD.delete($)}hasCache($){return ID($)!==1}}function DZ($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>aJ||G>aJ){if(J&$J)Q=Q.add(I);if(G&$J)X=X.add(I);I=I.double(),J>>=$J,G>>=$J}return{p1:Q,p2:X}}function XZ($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return eq(U),U}else return a4($,{isLE:J})}function wZ($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>aJ))throw Error(`CURVE.${q} must be positive bigint`)}let I=XZ(U.p,J.Fp,G),Q=XZ(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function t4($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var B8=BigInt(0),tJ=BigInt(1),e4=BigInt(2);function JB($){return eI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function zZ($){let U=JB($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X||YI,D=O?255:448,w=O?32:56,Y=O?BigInt(9):BigInt(5),v=O?BigInt(121665):BigInt(39081),W=O?e4**BigInt(254):e4**BigInt(447),N=O?BigInt(8)*e4**BigInt(251)-tJ:BigInt(4)*e4**BigInt(445)-tJ,g=W+N+tJ,V=(M)=>j0(M,J),j=H(Y);function H(M){return T8(V(M),w)}function S(M){let K=o4(Z$(M,w,"uCoordinate"));if(O)K[31]&=127;return V(gI(K))}function B(M){return gI(I(o4(Z$(M,w,"scalar"))))}function k(M,K){let T=t(S(K),B(M));if(T===B8)throw Error("invalid private or public key received");return H(T)}function m(M){return k(M,j)}let h=m,_=k;function x(M,K,T){let f=V(M*(K-T));return K=V(K-f),T=V(T+f),{x_2:K,x_3:T}}function t(M,K){K8("u",M,B8,J),K8("scalar",K,W,g);let T=K,f=M,P=tJ,u=B8,y=M,n=tJ,U$=B8;for(let q$=BigInt(D-1);q$>=B8;q$--){let Y$=T>>q$&tJ;U$^=Y$,{x_2:P,x_3:y}=x(U$,P,y),{x_2:u,x_3:n}=x(U$,u,n),U$=Y$;let V$=P+u,W$=V(V$*V$),g$=P-u,M$=V(g$*g$),f$=W$-M$,k$=y+n,D0=y-n,w0=V(D0*V$),L0=V(k$*g$),YU=w0+L0,vU=w0-L0;y=V(YU*YU),n=V(f*V(vU*vU)),P=V(W$*M$),u=V(f$*(W$+V(v*f$)))}({x_2:P,x_3:y}=x(U$,P,y)),{x_2:u,x_3:n}=x(U$,u,n);let X$=Q(u);return V(P*X$)}let C={secretKey:w,publicKey:w,seed:w},A=(M=q(w))=>{return Z$(M,C.seed,"seed"),M},E={randomSecretKey:A};return Object.freeze({keygen:t4(A,h),getSharedSecret:_,getPublicKey:h,scalarMult:k,scalarMultBase:m,utils:E,GuBytes:j.slice(),lengths:C})}class QD{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,U){if(o0($),Z$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),E0(G)}update($){return dU(this),this.iHash.update($),this}digestInto($){dU(this),Z$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var eJ=($,U,J)=>new QD($,U).update(J).digest();eJ.create=($,U)=>new QD($,U);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var YZ=($,U)=>($+($>=0?U:-U)/WZ)/U;function GB($,U,J){let[[G,I],[Q,X]]=U,O=YZ(X*$,J),q=YZ(-I*$,J),D=$-O*G-q*Q,w=-O*I-q*X,Y=D<nU,v=w<nU;if(Y)D=-D;if(v)w=-w;let W=A8(Math.ceil(oq(J)/2))+sJ;if(D<nU||D>=W||w<nU||w>=W)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:Y,k1:D,k2neg:v,k2:w}}function OD($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function XD($,U){let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(H8(J.lowS,"lowS"),H8(J.prehash,"prehash"),J.format!==void 0)OD(J.format);return J}class vZ extends Error{constructor($=""){super($)}}var NI={Err:vZ,_tlv:{encode:($,U)=>{let{Err:J}=NI;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=j8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?j8(I.length/2|128):"";return j8($)+Q+I+U},decode($,U){let{Err:J}=NI,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let w of D)X=X<<8|w;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=NI;if($<nU)throw new U("integer: negative integers are not allowed");let J=j8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=NI;if($[0]&128)throw new U("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return WI($)}},toSig($){let{Err:U,_int:J,_tlv:G}=NI,I=Z$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:w}=G.decode(2,q);if(w.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=NI,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}},nU=BigInt(0),sJ=BigInt(1),WZ=BigInt(2),s4=BigInt(3),QB=BigInt(4);function qD($,U={}){let J=wZ("weierstrass",$,U),{Fp:G,Fn:I}=J,Q=J.CURVE,{h:X,n:O}=Q;eI(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=VZ(G,I);function w(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function Y(A,E,M){let{x:K,y:T}=E.toAffine(),f=G.toBytes(K);if(H8(M,"isCompressed"),M){w();let P=!G.isOdd(T);return d$(gZ(P),f)}else return d$(Uint8Array.of(4),f,G.toBytes(T))}function v(A){Z$(A,void 0,"Point");let{publicKey:E,publicKeyUncompressed:M}=D,K=A.length,T=A[0],f=A.subarray(1);if(K===E&&(T===2||T===3)){let P=G.fromBytes(f);if(!G.isValid(P))throw Error("bad point: is not on curve, wrong x");let u=g(P),y;try{y=G.sqrt(u)}catch(X$){let q$=X$ instanceof Error?": "+X$.message:"";throw Error("bad point: is not on curve, sqrt error"+q$)}w();let n=G.isOdd(y);if((T&1)===1!==n)y=G.neg(y);return{x:P,y}}else if(K===M&&T===4){let P=G.BYTES,u=G.fromBytes(f.subarray(0,P)),y=G.fromBytes(f.subarray(P,P*2));if(!V(u,y))throw Error("bad point: is not on curve");return{x:u,y}}else throw Error(`bad point: got length ${K}, expected compressed=${E} or uncompressed=${M}`)}let W=U.toBytes||Y,N=U.fromBytes||v;function g(A){let E=G.sqr(A),M=G.mul(E,A);return G.add(G.add(M,G.mul(A,Q.a)),Q.b)}function V(A,E){let M=G.sqr(E),K=g(A);return G.eql(M,K)}if(!V(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let j=G.mul(G.pow(Q.a,s4),QB),H=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(j,H)))throw Error("bad curve params: a or b");function S(A,E,M=!1){if(!G.isValid(E)||M&&G.is0(E))throw Error(`bad point coordinate ${A}`);return E}function B(A){if(!(A instanceof x))throw Error("Weierstrass Point expected")}function k(A){if(!q||!q.basises)throw Error("no endo");return GB(A,q.basises,I.ORDER)}let m=aq((A,E)=>{let{X:M,Y:K,Z:T}=A;if(G.eql(T,G.ONE))return{x:M,y:K};let f=A.is0();if(E==null)E=f?G.ONE:G.inv(T);let P=G.mul(M,E),u=G.mul(K,E),y=G.mul(T,E);if(f)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:u}}),h=aq((A)=>{if(A.is0()){if(U.allowInfinityPoint&&!G.is0(A.Y))return;throw Error("bad point: ZERO")}let{x:E,y:M}=A.toAffine();if(!G.isValid(E)||!G.isValid(M))throw Error("bad point: x or y not field elements");if(!V(E,M))throw Error("bad point: equation left != right");if(!A.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(A,E,M,K,T){return M=new x(G.mul(M.X,A),M.Y,M.Z),E=_8(K,E),M=_8(T,M),E.add(M)}class x{static BASE=new x(Q.Gx,Q.Gy,G.ONE);static ZERO=new x(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(A,E,M){this.X=S("x",A),this.Y=S("y",E,!0),this.Z=S("z",M),Object.freeze(this)}static CURVE(){return Q}static fromAffine(A){let{x:E,y:M}=A||{};if(!A||!G.isValid(E)||!G.isValid(M))throw Error("invalid affine point");if(A instanceof x)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(M))return x.ZERO;return new x(E,M,G.ONE)}static fromBytes(A){let E=x.fromAffine(N(Z$(A,void 0,"point")));return E.assertValidity(),E}static fromHex(A){return x.fromBytes(tI(A))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(A=8,E=!0){if(C.createCache(this,A),!E)this.multiply(s4);return this}assertValidity(){h(this)}hasEvenY(){let{y:A}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(A)}equals(A){B(A);let{X:E,Y:M,Z:K}=this,{X:T,Y:f,Z:P}=A,u=G.eql(G.mul(E,P),G.mul(T,K)),y=G.eql(G.mul(M,P),G.mul(f,K));return u&&y}negate(){return new x(this.X,G.neg(this.Y),this.Z)}double(){let{a:A,b:E}=Q,M=G.mul(E,s4),{X:K,Y:T,Z:f}=this,P=G.ZERO,u=G.ZERO,y=G.ZERO,n=G.mul(K,K),U$=G.mul(T,T),X$=G.mul(f,f),q$=G.mul(K,T);return q$=G.add(q$,q$),y=G.mul(K,f),y=G.add(y,y),P=G.mul(A,y),u=G.mul(M,X$),u=G.add(P,u),P=G.sub(U$,u),u=G.add(U$,u),u=G.mul(P,u),P=G.mul(q$,P),y=G.mul(M,y),X$=G.mul(A,X$),q$=G.sub(n,X$),q$=G.mul(A,q$),q$=G.add(q$,y),y=G.add(n,n),n=G.add(y,n),n=G.add(n,X$),n=G.mul(n,q$),u=G.add(u,n),X$=G.mul(T,f),X$=G.add(X$,X$),n=G.mul(X$,q$),P=G.sub(P,n),y=G.mul(X$,U$),y=G.add(y,y),y=G.add(y,y),new x(P,u,y)}add(A){B(A);let{X:E,Y:M,Z:K}=this,{X:T,Y:f,Z:P}=A,u=G.ZERO,y=G.ZERO,n=G.ZERO,U$=Q.a,X$=G.mul(Q.b,s4),q$=G.mul(E,T),Y$=G.mul(M,f),V$=G.mul(K,P),W$=G.add(E,M),g$=G.add(T,f);W$=G.mul(W$,g$),g$=G.add(q$,Y$),W$=G.sub(W$,g$),g$=G.add(E,K);let M$=G.add(T,P);return g$=G.mul(g$,M$),M$=G.add(q$,V$),g$=G.sub(g$,M$),M$=G.add(M,K),u=G.add(f,P),M$=G.mul(M$,u),u=G.add(Y$,V$),M$=G.sub(M$,u),n=G.mul(U$,g$),u=G.mul(X$,V$),n=G.add(u,n),u=G.sub(Y$,n),n=G.add(Y$,n),y=G.mul(u,n),Y$=G.add(q$,q$),Y$=G.add(Y$,q$),V$=G.mul(U$,V$),g$=G.mul(X$,g$),Y$=G.add(Y$,V$),V$=G.sub(q$,V$),V$=G.mul(U$,V$),g$=G.add(g$,V$),q$=G.mul(Y$,g$),y=G.add(y,q$),q$=G.mul(M$,g$),u=G.mul(W$,u),u=G.sub(u,q$),q$=G.mul(W$,Y$),n=G.mul(M$,n),n=G.add(n,q$),new x(u,y,n)}subtract(A){return this.add(A.negate())}is0(){return this.equals(x.ZERO)}multiply(A){let{endo:E}=U;if(!I.isValidNot0(A))throw Error("invalid scalar: out of range");let M,K,T=(f)=>C.cached(this,f,(P)=>JD(x,P));if(E){let{k1neg:f,k1:P,k2neg:u,k2:y}=k(A),{p:n,f:U$}=T(P),{p:X$,f:q$}=T(y);K=U$.add(q$),M=_(E.beta,n,X$,f,u)}else{let{p:f,f:P}=T(A);M=f,K=P}return JD(x,[M,K])[0]}multiplyUnsafe(A){let{endo:E}=U,M=this;if(!I.isValid(A))throw Error("invalid scalar: out of range");if(A===nU||M.is0())return x.ZERO;if(A===sJ)return M;if(C.hasCache(this))return this.multiply(A);if(E){let{k1neg:K,k1:T,k2neg:f,k2:P}=k(A),{p1:u,p2:y}=DZ(x,M,T,P);return _(E.beta,u,y,K,f)}else return C.unsafe(M,A)}toAffine(A){return m(this,A)}isTorsionFree(){let{isTorsionFree:A}=U;if(X===sJ)return!0;if(A)return A(x,this);return C.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:A}=U;if(X===sJ)return this;if(A)return A(x,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(A=!0){return H8(A,"isCompressed"),this.assertValidity(),W(x,this,A)}toHex(A=!0){return aI(this.toBytes(A))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let t=I.BITS,C=new GD(x,U.endo?Math.ceil(t/2):t);return x.BASE.precompute(8),x}function gZ($){return Uint8Array.of($?2:3)}function VZ($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function XB($,U={}){let{Fn:J}=$,G=U.randomBytes||YI,I=Object.assign(VZ($.Fp,J),{seed:sq(J.ORDER)});function Q(W){try{let N=J.fromBytes(W);return J.isValidNot0(N)}catch(N){return!1}}function X(W,N){let{publicKey:g,publicKeyUncompressed:V}=I;try{let j=W.length;if(N===!0&&j!==g)return!1;if(N===!1&&j!==V)return!1;return!!$.fromBytes(W)}catch(j){return!1}}function O(W=G(I.seed)){return JZ(Z$(W,I.seed,"seed"),J.ORDER)}function q(W,N=!0){return $.BASE.multiply(J.fromBytes(W)).toBytes(N)}function D(W){let{secretKey:N,publicKey:g,publicKeyUncompressed:V}=I;if(!cJ(W))return;if("_lengths"in J&&J._lengths||N===g)return;let j=Z$(W,void 0,"key").length;return j===g||j===V}function w(W,N,g=!0){if(D(W)===!0)throw Error("first arg must be private key");if(D(N)===!1)throw Error("second arg must be public key");let V=J.fromBytes(W);return $.fromBytes(N).multiply(V).toBytes(g)}let Y={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},v=t4(O,q);return Object.freeze({getPublicKey:q,getSharedSecret:w,keygen:v,Point:$,utils:Y,lengths:I})}function DD($,U,J={}){o0(U),eI(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||YI,I=J.hmac||((M,K)=>eJ(U,M,K)),{Fp:Q,Fn:X}=$,{ORDER:O,BITS:q}=X,{keygen:D,getPublicKey:w,getSharedSecret:Y,utils:v,lengths:W}=XB($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},g=O*WZ<Q.ORDER;function V(M){let K=O>>sJ;return M>K}function j(M,K){if(!X.isValidNot0(K))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return K}function H(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function S(M,K){OD(K);let T=W.signature,f=K==="compact"?T:K==="recovered"?T+1:void 0;return Z$(M,f)}class B{r;s;recovery;constructor(M,K,T){if(this.r=j("r",M),this.s=j("s",K),T!=null){if(H(),![0,1,2,3].includes(T))throw Error("invalid recovery id");this.recovery=T}Object.freeze(this)}static fromBytes(M,K=N.format){S(M,K);let T;if(K==="der"){let{r:y,s:n}=NI.toSig(Z$(M));return new B(y,n)}if(K==="recovered")T=M[0],K="compact",M=M.subarray(1);let f=W.signature/2,P=M.subarray(0,f),u=M.subarray(f,f*2);return new B(X.fromBytes(P),X.fromBytes(u),T)}static fromHex(M,K){return this.fromBytes(tI(M),K)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new B(this.r,this.s,M)}recoverPublicKey(M){let{r:K,s:T}=this,f=this.assertRecovery(),P=f===2||f===3?K+O:K;if(!Q.isValid(P))throw Error("invalid recovery id: sig.r+curve.n != R.x");let u=Q.toBytes(P),y=$.fromBytes(d$(gZ((f&1)===0),u)),n=X.inv(P),U$=m(Z$(M,void 0,"msgHash")),X$=X.create(-U$*n),q$=X.create(T*n),Y$=$.BASE.multiplyUnsafe(X$).add(y.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return V(this.s)}toBytes(M=N.format){if(OD(M),M==="der")return tI(NI.hexFromSig(this));let{r:K,s:T}=this,f=X.toBytes(K),P=X.toBytes(T);if(M==="recovered")return H(),d$(Uint8Array.of(this.assertRecovery()),f,P);return d$(f,P)}toHex(M){return aI(this.toBytes(M))}}let k=J.bits2int||function(K){if(K.length>8192)throw Error("input is too large");let T=WI(K),f=K.length*8-q;return f>0?T>>BigInt(f):T},m=J.bits2int_modN||function(K){return X.create(k(K))},h=A8(q);function _(M){return K8("num < 2^"+q,M,nU,h),X.toBytes(M)}function x(M,K){return Z$(M,void 0,"message"),K?Z$(U(M),void 0,"prehashed message"):M}function t(M,K,T){let{lowS:f,prehash:P,extraEntropy:u}=XD(T,N);M=x(M,P);let y=m(M),n=X.fromBytes(K);if(!X.isValidNot0(n))throw Error("invalid private key");let U$=[_(n),_(y)];if(u!=null&&u!==!1){let V$=u===!0?G(W.secretKey):u;U$.push(Z$(V$,void 0,"extraEntropy"))}let X$=d$(...U$),q$=y;function Y$(V$){let W$=k(V$);if(!X.isValidNot0(W$))return;let g$=X.inv(W$),M$=$.BASE.multiply(W$).toAffine(),f$=X.create(M$.x);if(f$===nU)return;let k$=X.create(g$*X.create(q$+f$*n));if(k$===nU)return;let D0=(M$.x===f$?0:2)|Number(M$.y&sJ),w0=k$;if(f&&V(k$))w0=X.neg(k$),D0^=1;return new B(f$,w0,g?void 0:D0)}return{seed:X$,k2sig:Y$}}function C(M,K,T={}){let{seed:f,k2sig:P}=t(M,K,T);return n7(U.outputLen,X.BYTES,I)(f,P).toBytes(T.format)}function A(M,K,T,f={}){let{lowS:P,prehash:u,format:y}=XD(f,N);if(T=Z$(T,void 0,"publicKey"),K=x(K,u),!cJ(M)){let n=M instanceof B?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+n)}S(M,y);try{let n=B.fromBytes(M,y),U$=$.fromBytes(T);if(P&&n.hasHighS())return!1;let{r:X$,s:q$}=n,Y$=m(K),V$=X.inv(q$),W$=X.create(Y$*V$),g$=X.create(X$*V$),M$=$.BASE.multiplyUnsafe(W$).add(U$.multiplyUnsafe(g$));if(M$.is0())return!1;return X.create(M$.x)===X$}catch(n){return!1}}function E(M,K,T={}){let{prehash:f}=XD(T,N);return K=x(K,f),B.fromBytes(M,"recovered").recoverPublicKey(K).toBytes()}return Object.freeze({keygen:D,getPublicKey:w,getSharedSecret:Y,utils:v,lengths:W,Point:$,sign:C,verify:A,recoverPublicKey:E,Signature:B,hash:U})}function NZ($,U,J){return $&U^~$&J}function ZZ($,U,J){return $&U^$&J^U&J}class $Q{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=c4(this.buffer)}update($){dU(this),Z$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=c4($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){dU(this),n4($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,E0(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let w=Q;w<G;w++)U[w]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=c4($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let w=0;w<q;w++)X.setUint32(4*w,D[w],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var iU=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),cU=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),G0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),Q0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var UQ=BigInt(4294967295),RZ=BigInt(32);function OB($,U=!1){if(U)return{h:Number($&UQ),l:Number($>>RZ&UQ)};return{h:Number($>>RZ&UQ)|0,l:Number($&UQ)|0}}function IQ($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=OB($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var wD=($,U,J)=>$>>>J,zD=($,U,J)=>$<<32-J|U>>>J,UJ=($,U,J)=>$>>>J|U<<32-J,IJ=($,U,J)=>$<<32-J|U>>>J,S8=($,U,J)=>$<<64-J|U>>>J-32,L8=($,U,J)=>$>>>J-32|U<<64-J;var MZ=($,U,J)=>$<<J|U>>>32-J,HZ=($,U,J)=>U<<J|$>>>32-J,jZ=($,U,J)=>U<<J-32|$>>>64-J,TZ=($,U,J)=>$<<J-32|U>>>64-J;function NU($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var KZ=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),AZ=($,U,J,G)=>U+J+G+($/4294967296|0)|0,PZ=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),_Z=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,BZ=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),SZ=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var DB=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ZI=new Uint32Array(64);class YD extends $Q{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let w=0;w<16;w++,U+=4)ZI[w]=$.getUint32(U,!1);for(let w=16;w<64;w++){let Y=ZI[w-15],v=ZI[w-2],W=GU(Y,7)^GU(Y,18)^Y>>>3,N=GU(v,17)^GU(v,19)^v>>>10;ZI[w]=N+ZI[w-7]+W+ZI[w-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let w=0;w<64;w++){let Y=GU(X,6)^GU(X,11)^GU(X,25),v=D+Y+NZ(X,O,q)+DB[w]+ZI[w]|0,N=(GU(J,2)^GU(J,13)^GU(J,22))+ZZ(J,G,I)|0;D=q,q=O,O=X,X=Q+v|0,Q=I,I=G,G=J,J=v+N|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){E0(ZI)}destroy(){this.set(0,0,0,0,0,0,0,0),E0(this.buffer)}}class LZ extends YD{A=iU[0]|0;B=iU[1]|0;C=iU[2]|0;D=iU[3]|0;E=iU[4]|0;F=iU[5]|0;G=iU[6]|0;H=iU[7]|0;constructor(){super(32)}}class wB extends YD{A=cU[0]|0;B=cU[1]|0;C=cU[2]|0;D=cU[3]|0;E=cU[4]|0;F=cU[5]|0;G=cU[6]|0;H=cU[7]|0;constructor(){super(28)}}var CZ=(()=>IQ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),zB=(()=>CZ[0])(),YB=(()=>CZ[1])(),RI=new Uint32Array(80),MI=new Uint32Array(80);class C8 extends $Q{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:w,Fl:Y,Gh:v,Gl:W,Hh:N,Hl:g}=this;return[$,U,J,G,I,Q,X,O,q,D,w,Y,v,W,N,g]}set($,U,J,G,I,Q,X,O,q,D,w,Y,v,W,N,g){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=w|0,this.Fl=Y|0,this.Gh=v|0,this.Gl=W|0,this.Hh=N|0,this.Hl=g|0}process($,U){for(let H=0;H<16;H++,U+=4)RI[H]=$.getUint32(U),MI[H]=$.getUint32(U+=4);for(let H=16;H<80;H++){let S=RI[H-15]|0,B=MI[H-15]|0,k=UJ(S,B,1)^UJ(S,B,8)^wD(S,B,7),m=IJ(S,B,1)^IJ(S,B,8)^zD(S,B,7),h=RI[H-2]|0,_=MI[H-2]|0,x=UJ(h,_,19)^S8(h,_,61)^wD(h,_,6),t=IJ(h,_,19)^L8(h,_,61)^zD(h,_,6),C=PZ(m,t,MI[H-7],MI[H-16]),A=_Z(C,k,x,RI[H-7],RI[H-16]);RI[H]=A|0,MI[H]=C|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:w,El:Y,Fh:v,Fl:W,Gh:N,Gl:g,Hh:V,Hl:j}=this;for(let H=0;H<80;H++){let S=UJ(w,Y,14)^UJ(w,Y,18)^S8(w,Y,41),B=IJ(w,Y,14)^IJ(w,Y,18)^L8(w,Y,41),k=w&v^~w&N,m=Y&W^~Y&g,h=BZ(j,B,m,YB[H],MI[H]),_=SZ(h,V,S,k,zB[H],RI[H]),x=h|0,t=UJ(J,G,28)^S8(J,G,34)^S8(J,G,39),C=IJ(J,G,28)^L8(J,G,34)^L8(J,G,39),A=J&I^J&X^I&X,E=G&Q^G&O^Q&O;V=N|0,j=g|0,N=v|0,g=W|0,v=w|0,W=Y|0,{h:w,l:Y}=NU(q|0,D|0,_|0,x|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=KZ(x,C,E);J=AZ(M,_,t,A),G=M|0}({h:J,l:G}=NU(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=NU(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=NU(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=NU(this.Dh|0,this.Dl|0,q|0,D|0),{h:w,l:Y}=NU(this.Eh|0,this.El|0,w|0,Y|0),{h:v,l:W}=NU(this.Fh|0,this.Fl|0,v|0,W|0),{h:N,l:g}=NU(this.Gh|0,this.Gl|0,N|0,g|0),{h:V,l:j}=NU(this.Hh|0,this.Hl|0,V|0,j|0),this.set(J,G,I,Q,X,O,q,D,w,Y,v,W,N,g,V,j)}roundClean(){E0(RI,MI)}destroy(){E0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class vB extends C8{Ah=Q0[0]|0;Al=Q0[1]|0;Bh=Q0[2]|0;Bl=Q0[3]|0;Ch=Q0[4]|0;Cl=Q0[5]|0;Dh=Q0[6]|0;Dl=Q0[7]|0;Eh=Q0[8]|0;El=Q0[9]|0;Fh=Q0[10]|0;Fl=Q0[11]|0;Gh=Q0[12]|0;Gl=Q0[13]|0;Hh=Q0[14]|0;Hl=Q0[15]|0;constructor(){super(64)}}class EZ extends C8{Ah=G0[0]|0;Al=G0[1]|0;Bh=G0[2]|0;Bl=G0[3]|0;Ch=G0[4]|0;Cl=G0[5]|0;Dh=G0[6]|0;Dl=G0[7]|0;Eh=G0[8]|0;El=G0[9]|0;Fh=G0[10]|0;Fl=G0[11]|0;Gh=G0[12]|0;Gl=G0[13]|0;Hh=G0[14]|0;Hl=G0[15]|0;constructor(){super(48)}}var g0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),V0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class WB extends C8{Ah=g0[0]|0;Al=g0[1]|0;Bh=g0[2]|0;Bl=g0[3]|0;Ch=g0[4]|0;Cl=g0[5]|0;Dh=g0[6]|0;Dl=g0[7]|0;Eh=g0[8]|0;El=g0[9]|0;Fh=g0[10]|0;Fl=g0[11]|0;Gh=g0[12]|0;Gl=g0[13]|0;Hh=g0[14]|0;Hl=g0[15]|0;constructor(){super(28)}}class gB extends C8{Ah=V0[0]|0;Al=V0[1]|0;Bh=V0[2]|0;Bl=V0[3]|0;Ch=V0[4]|0;Cl=V0[5]|0;Dh=V0[6]|0;Dl=V0[7]|0;Eh=V0[8]|0;El=V0[9]|0;Fh=V0[10]|0;Fl=V0[11]|0;Gh=V0[12]|0;Gl=V0[13]|0;Hh=V0[14]|0;Hl=V0[15]|0;constructor(){super(32)}}var JQ=pJ(()=>new LZ,vI(1));var fZ=pJ(()=>new EZ,vI(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VB=BigInt(1),bZ=BigInt(2),NB=BigInt(3),ZB=BigInt(5),Ln=BigInt(8),kZ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function RB($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=kZ,O=$*$%Q*$%Q,q=a0(O,bZ,Q)*O%Q,D=a0(q,VB,Q)*$%Q,w=a0(D,ZB,Q)*D%Q,Y=a0(w,U,Q)*w%Q,v=a0(Y,J,Q)*Y%Q,W=a0(v,G,Q)*v%Q,N=a0(W,I,Q)*W%Q,g=a0(N,I,Q)*W%Q,V=a0(g,U,Q)*w%Q;return{pow_p_5_8:a0(V,bZ,Q)*$%Q,b2:O}}function MB($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var uZ=(()=>{let $=kZ;return zZ({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=RB(U);return j0(a0(J,NB,$)*G,$)},adjustScalarBytes:MB})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HB=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),jB=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var TB=qD(HB),vD=DD(TB,JQ);var KB=qD(jB),FZ=DD(KB,fZ);function xZ($,U,J){if(o0($),J===void 0)J=new Uint8Array($.outputLen);return eJ($,J,U)}var WD=Uint8Array.of(0),mZ=Uint8Array.of();function yZ($,U,J,G=32){o0($),t$(G,"length");let I=$.outputLen;if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=mZ;else Z$(J,void 0,"info");let X=new Uint8Array(Q*I),O=eJ.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let w=0;w<Q;w++)WD[0]=w+1,q.update(w===0?mZ:D).update(J).update(WD).digestInto(D),X.set(D,I*w),O._cloneInto(q);return O.destroy(),q.destroy(),E0(D,WD),X.slice(0,G)}var AB=BigInt(0),E8=BigInt(1),PB=BigInt(2),_B=BigInt(7),BB=BigInt(256),SB=BigInt(113),lZ=[],dZ=[],nZ=[];for(let $=0,U=E8,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],lZ.push(2*(5*G+J)),dZ.push(($+1)*($+2)/2%64);let I=AB;for(let Q=0;Q<7;Q++)if(U=(U<<E8^(U>>_B)*SB)%BB,U&PB)I^=E8<<(E8<<BigInt(Q))-E8;nZ.push(I)}var iZ=IQ(nZ,!0),LB=iZ[0],CB=iZ[1],rZ=($,U,J)=>J>32?jZ($,U,J):MZ($,U,J),hZ=($,U,J)=>J>32?TZ($,U,J):HZ($,U,J);function EB($,U=24){let J=new Uint32Array(10);for(let G=24-U;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let O=(X+8)%10,q=(X+2)%10,D=J[q],w=J[q+1],Y=rZ(D,w,1)^J[O],v=hZ(D,w,1)^J[O+1];for(let W=0;W<50;W+=10)$[X+W]^=Y,$[X+W+1]^=v}let I=$[2],Q=$[3];for(let X=0;X<24;X++){let O=dZ[X],q=rZ(I,Q,O),D=hZ(I,Q,O),w=lZ[X];I=$[w],Q=$[w+1],$[w]=q,$[w+1]=D}for(let X=0;X<50;X+=10){for(let O=0;O<10;O++)J[O]=$[X+O];for(let O=0;O<10;O++)$[X+O]^=~J[(O+2)%10]&J[(O+4)%10]}$[0]^=LB[G],$[1]^=CB[G]}E0(J)}class GQ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,U,J,G=!1,I=24){if(this.blockLen=$,this.suffix=U,this.outputLen=J,this.enableXOF=G,this.rounds=I,t$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=i4(this.state)}clone(){return this._cloneInto()}keccak(){iq(this.state32),EB(this.state32,this.rounds),iq(this.state32),this.posOut=0,this.pos=0}update($){dU(this),Z$($);let{blockLen:U,state:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(U-this.pos,G-I);for(let X=0;X<Q;X++)J[this.pos++]^=$[I++];if(this.pos===U)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:U,pos:J,blockLen:G}=this;if($[J]^=U,(U&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){dU(this,!1),Z$($),this.finish();let U=this.state,{blockLen:J}=this;for(let G=0,I=$.length;G<I;){if(this.posOut>=J)this.keccak();let Q=Math.min(J-this.posOut,I-G);$.set(U.subarray(this.posOut,this.posOut+Q),G),this.posOut+=Q,G+=Q}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return t$($),this.xofInto(new Uint8Array($))}digestInto($){if(n4($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,E0(this.state)}_cloneInto($){let{blockLen:U,suffix:J,outputLen:G,rounds:I,enableXOF:Q}=this;return $||=new GQ(U,J,G,Q,I),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=I,$.suffix=J,$.outputLen=G,$.enableXOF=Q,$.destroyed=this.destroyed,$}}var cZ=($,U,J,G={})=>pJ(()=>new GQ(U,$,J),G);var JJ=cZ(6,136,32,vI(8));var pZ=cZ(6,72,64,vI(10));var oZ=($,U,J,G={})=>pJ((I={})=>new GQ(U,$,I.dkLen===void 0?J:I.dkLen,!0),G),aZ=oZ(31,168,16,vI(11)),ZU=oZ(31,136,32,vI(12));function gD($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function eZ($){return gD($),($&$-1)===0&&$!==0}function VD($,U){gD($);let J=0;for(let G=0;G<U;G++,$>>>=1)J=J<<1|$&1;return J}function sZ($){return gD($),31-Math.clz32($)}function tZ($){let U=$.length;if(U<2||!eZ(U))throw Error("n must be a power of 2 and greater than 1. Got "+U);let J=sZ(U);for(let G=0;G<U;G++){let I=VD(G,J);if(G<I){let Q=$[G];$[G]=$[I],$[I]=Q}}return $}var ND=($,U)=>{let{N:J,roots:G,dit:I,invertButterflies:Q=!1,skipStages:X=0,brp:O=!0}=U,q=sZ(J);if(!eZ(J))throw Error("FFT: Polynomial size should be power of two");let D=I!==Q;return(w)=>{if(w.length!==J)throw Error("FFT: wrong Polynomial length");if(I&&O)tZ(w);for(let Y=0,v=1;Y<q-X;Y++){let W=I?Y+1+X:q-Y,N=1<<W,g=N>>1,V=J>>W;for(let j=0;j<J;j+=N)for(let H=0,S=v++;H<g;H++){let B=Q?I?J-S:S:H*V,k=j+H,m=j+H+g,h=G[B],_=w[m],x=w[k];if(D){let t=$.mul(_,h);w[k]=$.add(x,t),w[m]=$.sub(x,t)}else if(Q)w[k]=$.add(_,x),w[m]=$.mul($.sub(_,x),h);else w[k]=$.add(x,_),w[m]=$.mul($.sub(x,_),h)}}if(!I&&O)tZ(w);return w}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var RU=YI;function QQ($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function $5($){return Uint8Array.from($)}function GJ($,...U){let J=(I)=>typeof I==="number"?I:I.bytesLen,G=U.reduce((I,Q)=>I+J(Q),0);return{bytesLen:G,encode:(I)=>{let Q=new Uint8Array(G);for(let X=0,O=0;X<U.length;X++){let q=U[X],D=J(q),w=typeof q==="number"?I[X]:q.encode(I[X]);if(Z$(w,D,$),Q.set(w,O),typeof q!=="number")w.fill(0);O+=D}return Q},decode:(I)=>{Z$(I,G,$);let Q=[];for(let X of U){let O=J(X),q=I.subarray(0,O);Q.push(typeof X==="number"?q:X.decode(q)),I=I.subarray(O)}return Q}}}function XQ($,U){let J=U*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==U)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${U}`);let I=new Uint8Array(J);for(let Q=0,X=0;Q<G.length;Q++){let O=$.encode(G[Q]);I.set(O,X),O.fill(0),X+=O.length}return I},decode:(G)=>{Z$(G,J);let I=[];for(let Q=0;Q<G.length;Q+=$.bytesLen)I.push($.decode(G.subarray(Q,Q+$.bytesLen)));return I}}}function p$(...$){for(let U of $)if(Array.isArray(U))for(let J of U)J.fill(0);else U.fill(0)}function ZD($){return(1<<$)-1}var nn=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var U5=($)=>{let{newPoly:U,N:J,Q:G,F:I,ROOT_OF_UNITY:Q,brvBits:X,isKyber:O}=$,q=(H,S=G)=>{let B=H%S|0;return(B>=0?B|0:S+B|0)|0},D=(H,S=G)=>{let B=q(H,S)|0;return(B>S>>1?B-S|0:B)|0};function w(){let H=U(J);for(let S=0;S<J;S++){let B=VD(S,X),k=BigInt(Q)**BigInt(B)%BigInt(G);H[S]=Number(k)|0}return H}let Y=w(),v={add:(H,S)=>q((H|0)+(S|0))|0,sub:(H,S)=>q((H|0)-(S|0))|0,mul:(H,S)=>q((H|0)*(S|0))|0,inv:(H)=>{throw Error("not implemented")}},W={N:J,roots:Y,invertButterflies:!0,skipStages:O?1:0,brp:!1},N=ND(v,{dit:!1,...W}),g=ND(v,{dit:!0,...W});return{mod:q,smod:D,nttZetas:Y,NTT:{encode:(H)=>{return N(H)},decode:(H)=>{g(H);for(let S=0;S<H.length;S++)H[S]=q(I*H[S]);return H}},bitsCoder:(H,S)=>{let B=ZD(H),k=H*(J/8);return{bytesLen:k,encode:(m)=>{let h=new Uint8Array(k);for(let _=0,x=0,t=0,C=0;_<m.length;_++){x|=(S.encode(m[_])&B)<<t,t+=H;for(;t>=8;t-=8,x>>=8)h[C++]=x&ZD(t)}return h},decode:(m)=>{let h=U(J);for(let _=0,x=0,t=0,C=0;_<m.length;_++){x|=m[_]<<t,t+=8;for(;t>=H;t-=H,x>>=H)h[C++]=S.decode(x&B)}return h}}}}},fB=($)=>(U,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(U.length+2);G.set(U);let I=U.length,Q=new Uint8Array(J),X=$.create({}),O=0,q=0;return{stats:()=>({calls:O,xofs:q}),get:(D,w)=>{return G[I+0]=D,G[I+1]=w,X.destroy(),X=$.create({}).update(G),O++,()=>{return q++,X.xofInto(Q)}},clean:()=>{X.destroy(),p$(Q,G)}}},I5=fB(aZ);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var N0=256,pU=3329,bB=3303,kB=17,{mod:k8,nttZetas:uB,NTT:QJ,bitsCoder:FB}=U5({N:N0,Q:pU,F:bB,ROOT_OF_UNITY:kB,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),RD={512:{N:N0,Q:pU,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:N0,Q:pU,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:N0,Q:pU,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},mB=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let U=2**($-1);return{encode:(J)=>((J<<$)+pU/2)/pU,decode:(J)=>J*pU+U>>>$}},f8=($)=>FB($,mB($));function XJ($,U){for(let J=0;J<N0;J++)$[J]=k8($[J]+U[J])}function xB($,U){for(let J=0;J<N0;J++)$[J]=k8($[J]-U[J])}function yB($,U,J,G,I){let Q=k8(U*G*I+$*J),X=k8($*G+U*J);return{c0:Q,c1:X}}function OQ($,U){for(let J=0;J<N0/2;J++){let G=uB[64+(J>>1)];if(J&1)G=-G;let{c0:I,c1:Q}=yB($[2*J+0],$[2*J+1],U[2*J+0],U[2*J+1],G);$[2*J+0]=I,$[2*J+1]=Q}return $}function J5($){let U=new Uint16Array(N0);for(let J=0;J<N0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let I=0;J<N0&&I+3<=G.length;I+=3){let Q=(G[I+0]>>0|G[I+1]<<8)&4095,X=(G[I+1]>>4|G[I+2]<<4)&4095;if(Q<pU)U[J++]=Q;if(J<N0&&X<pU)U[J++]=X}}return U}function b8($,U,J,G){let I=$(G*N0/4,U,J),Q=new Uint16Array(N0),X=i4(I),O=0;for(let q=0,D=0,w=0,Y=0;q<X.length;q++){let v=X[q];for(let W=0;W<32;W++)if(w+=v&1,v>>=1,O+=1,O===G)Y=w,w=0;else if(O===2*G)Q[D++]=k8(Y-w),w=0,O=0}if(O)throw Error(`sampleCBD: leftover bits: ${O}`);return Q}var rB=($)=>{let{K:U,PRF:J,XOF:G,HASH512:I,ETA1:Q,ETA2:X,du:O,dv:q}=$,D=f8(1),w=f8(q),Y=f8(O),v=GJ("publicKey",XQ(f8(12),U),32),W=XQ(f8(12),U),N=GJ("ciphertext",XQ(Y,U),w),g=GJ("seed",32,32);return{secretCoder:W,lengths:{secretKey:W.bytesLen,publicKey:v.bytesLen,cipherText:N.bytesLen},keygen:(V)=>{Z$(V,32,"seed");let j=new Uint8Array(33);j.set(V),j[32]=U;let H=I(j),[S,B]=g.decode(H),k=[],m=[];for(let x=0;x<U;x++)k.push(QJ.encode(b8(J,B,x,Q)));let h=G(S);for(let x=0;x<U;x++){let t=QJ.encode(b8(J,B,U+x,Q));for(let C=0;C<U;C++){let A=J5(h.get(C,x));XJ(t,OQ(A,k[C]))}m.push(t)}h.clean();let _={publicKey:v.encode([m,S]),secretKey:W.encode(k)};return p$(S,B,k,m,j,H),_},encrypt:(V,j,H)=>{let[S,B]=v.decode(V),k=[];for(let C=0;C<U;C++)k.push(QJ.encode(b8(J,H,C,Q)));let m=G(B),h=new Uint16Array(N0),_=[];for(let C=0;C<U;C++){let A=b8(J,H,U+C,X),E=new Uint16Array(N0);for(let M=0;M<U;M++){let K=J5(m.get(C,M));XJ(E,OQ(K,k[M]))}XJ(A,QJ.decode(E)),_.push(A),XJ(h,OQ(S[C],k[C])),p$(E)}m.clean();let x=b8(J,H,2*U,X);XJ(x,QJ.decode(h));let t=D.decode(j);return XJ(t,x),p$(S,k,h,x),N.encode([_,t])},decrypt:(V,j)=>{let[H,S]=N.decode(V),B=W.decode(j),k=new Uint16Array(N0);for(let m=0;m<U;m++)XJ(k,OQ(B[m],QJ.encode(H[m])));return xB(S,QJ.decode(k)),p$(k,B,H),D.encode(S)}}};function MD($){let U=rB($),{HASH256:J,HASH512:G,KDF:I}=$,{secretCoder:Q,lengths:X}=U,O=GJ("secretKey",X.secretKey,X.publicKey,32,32),q=32,D=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:O.bytesLen},keygen:(w=RU(64))=>{Z$(w,64,"seed");let{publicKey:Y,secretKey:v}=U.keygen(w.subarray(0,32)),W=J(Y),N=O.encode([v,Y,W,w.subarray(32)]);return p$(v,W),{publicKey:Y,secretKey:N}},getPublicKey:(w)=>{let[Y,v,W,N]=O.decode(w);return Uint8Array.from(v)},encapsulate:(w,Y=RU(32))=>{Z$(w,X.publicKey,"publicKey"),Z$(Y,32,"message");let v=w.subarray(0,384*$.K),W=Q.encode(Q.decode($5(v)));if(!QQ(W,v))throw p$(W),Error("ML-KEM.encapsulate: wrong publicKey modulus");p$(W);let N=G.create().update(Y).update(J(w)).digest(),g=U.encrypt(w,Y,N.subarray(32,64));return p$(N.subarray(32)),{cipherText:g,sharedSecret:N.subarray(0,32)}},decapsulate:(w,Y)=>{Z$(Y,O.bytesLen,"secretKey"),Z$(w,X.cipherText,"cipherText");let v=O.bytesLen-96,W=v+32,N=J(Y.subarray(v/2,W));if(!QQ(N,Y.subarray(W,W+32)))throw Error("invalid secretKey: hash check failed");let[g,V,j,H]=O.decode(Y),S=U.decrypt(w,g),B=G.create().update(S).update(j).digest(),k=B.subarray(0,32),m=U.encrypt(V,S,B.subarray(32,64)),h=QQ(w,m),_=I.create({dkLen:32}).update(H).update(w).digest();return p$(S,m,!h?k:_),h?k:_}}}function hB($,U,J){return ZU.create({dkLen:$}).update(U).update(new Uint8Array([J])).digest()}var HD={HASH256:JJ,HASH512:pZ,KDF:ZU,XOF:I5,PRF:hB},Ji=MD({...HD,...RD[512]}),u8=MD({...HD,...RD[768]}),G5=MD({...HD,...RD[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lB($,U=!1){let{lengths:J,keygen:G}=$;if(U){let Q=$.Point.Fn;if(!Q)throw Error("No Point.Fn");G=(X=RU(J.seed))=>{Z$(X,J.seed,"seed");let O=Q.isLE?gI(X):WI(X),q=Q.toBytes(Q.create(O));return{secretKey:q,publicKey:$.getPublicKey(q)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(I)=>$.getPublicKey(I)}}function jD($,U=!1){let J=lB($,U);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,I=RU($.lengths.seed)){let Q=this.keygen(I).secretKey,X=this.decapsulate(G,Q),O=$.getPublicKey(Q);return p$(Q),{sharedSecret:X,cipherText:O}},decapsulate(G,I){let Q=$.getSharedSecret(I,G);return $.lengths.publicKeyHasPrefix?Q.subarray(1):Q}}}function F8($,U){return GJ(U,...$.map((J)=>{if(typeof J.lengths[U]!=="number")throw Error("wrong length: "+U);return J.lengths[U]}))}function TD($){return(U,J)=>$(U,{dkLen:J})}function dB($,U,...J){let G=F8(J,"seed"),I=F8(J,"publicKey");if($===void 0)$=G.bytesLen;t$($);function Q(X){Z$(X,$);let O=G.decode(U(X,G.bytesLen)),q=J.map((Y,v)=>Y.keygen(O[v])),D=q.map((Y)=>Y.secretKey),w=q.map((Y)=>Y.publicKey);return{secretKey:D,publicKey:w}}return{info:{lengths:{seed:$,publicKey:I.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=RU($)){let{publicKey:O,secretKey:q}=Q(X),D=I.encode(O);return p$(O),p$(q),{secretKey:X,publicKey:D}},expandDecapsulationKey:Q,realSeedLen:$}}function qQ($,U,J,G,...I){let Q=dB($,J,...I),X=F8(I,"cipherText"),O=F8(I,"publicKey"),q=F8(I,"msg");if(U===void 0)U=q.bytesLen;return t$(U),{lengths:{...Q.info.lengths,msg:U,msgRand:q.bytesLen,cipherText:X.bytesLen},getPublicKey:Q.getPublicKey,keygen:Q.keygen,encapsulate(D,w=RU(q.bytesLen)){let Y=O.decode(D),v=q.decode(w),W=I.map((j,H)=>j.encapsulate(Y[H],v[H])),N=W.map((j)=>j.sharedSecret),g=W.map((j)=>j.cipherText),V={sharedSecret:G(Y,g,N),cipherText:X.encode(g)};return p$(N,g),V},decapsulate(D,w){let Y=X.decode(D),{publicKey:v,secretKey:W}=Q.expandDecapsulationKey(w),N=I.map((g,V)=>g.decapsulate(Y[V],W[V]));return G(v,Y,N)}}}function Q5($,U,J,G,I){return o0(G),o0(I),qQ(32,32,TD(G),(Q,X,O)=>I(d$(O[0],O[1],X[1],Q[1],VI($))),U,J)}var Wi=Q5("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",u8,jD(vD,!0),ZU,JJ),gi=Q5("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",G5,jD(FZ,!0),ZU,JJ);function nB($,U,J,G,I){return o0(G),o0(I),qQ(32,32,TD(G),(Q,X,O)=>{let q=d$(O[0],O[1],X[0],Q[0],X[1],Q[1],VI($)),D=32,w=d$(VI("hybrid_prk"),q),Y=xZ(I,w),v=d$(oJ(32,2),VI("shared_secret"),VI("")),W=yZ(I,Y,v,32);return p$(Y,v,w,q),W},U,J)}var X5=jD(uZ),Vi=nB("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",u8,X5,ZU,JQ),iB=(()=>qQ(32,32,TD(ZU),($,U,J)=>JJ(d$(J[0],J[1],U[1],$[1],VI("\\.//^\\"))),u8,X5))();function cB($,U,J,G){let I=$.Point.Fn;if(!I)throw Error("no Point.Fn");function Q(X){let O;for(let w=0,Y=U;;w=Y,Y+=U){if(Y>X.length)throw Error("rejection sampling failed");if(O=I.fromBytes(X.subarray(w,Y),!0),I.isValidNot0(O))break}let q=I.toBytes(I.create(O)),D=$.getPublicKey(q,!1);return{secretKey:q,publicKey:D}}return{lengths:{secretKey:U,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=RU(G)){return Z$(X,G,"seed"),Q(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,O=RU(G)){Z$(O,G,"rand");let{secretKey:q}=Q(O),D=this.decapsulate(X,q),w=$.getPublicKey(q,!1);return p$(q),{sharedSecret:D,cipherText:w}},decapsulate(X,O){return $.getSharedSecret(O,X).subarray(1)}}}function pB($,U,J,G){let{secretKey:I,publicKeyUncompressed:Q}=J.lengths;if(!I||!Q)throw Error("wrong curve");let X=cB(J,I,Q,G),O=64,q=O+G;return qQ(32,32,(D)=>{Z$(D,32);let w=ZU(D,{dkLen:q}),Y=w.subarray(0,O),v=w.subarray(O,q);return d$(Y,v)},(D,w,Y)=>JJ(d$(Y[0],Y[1],w[1],D[1],VI($))),U,X)}var oB=(()=>pB("MLKEM768-P256",u8,vD,128))();var DQ=iB,O5=oB;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,U,J)=>$0($,U,J),AD=h$,$G=f4,X0=(...$)=>Pq(...$),UG=($)=>Y8($),IG=Tq,JG=($)=>xU($),zQ=BigInt(0),KD=BigInt(1);function oU($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function YQ($){if(typeof $==="bigint"){if(!wQ($))throw RangeError("positive bigint expected, got "+$)}else AD($);return $}function MU($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=U&&`"${U}" `;throw RangeError(J+"expected safe integer, got "+$)}}function m8($){let U=YQ($).toString(16);return U.length&1?"0"+U:U}function q5($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?zQ:BigInt("0x"+$)}function OJ($){return q5(f4($))}function QU($){return q5(f4(HI($0($)).reverse()))}function vQ($,U){if(h$(U),U===0)throw RangeError("zero length");$=YQ($);let J=$.toString(16);if(J.length>U*2)throw RangeError("number too large");return Y8(J.padStart(U*2,"0"))}function x8($,U){return vQ($,U).reverse()}function D5($,U){if($=S$($),U=S$(U),$.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function HI($){return Uint8Array.from(S$($))}function WQ($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var wQ=($)=>typeof $==="bigint"&&zQ<=$;function aB($,U,J){return wQ($)&&wQ(U)&&wQ(J)&&U<=$&&$<J}function aU($,U,J,G){if(!aB(U,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function GG($){if($<zQ)throw Error("expected non-negative bigint, got "+$);let U;for(U=0;$>zQ;$>>=KD,U+=1);return U}var y8=($)=>(KD<<BigInt($))-KD;function w5($,U,J){if(h$($,"hashLen"),h$(U,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(V)=>new Uint8Array(V),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),w=0,Y=()=>{q.fill(1),D.fill(0),w=0},v=(...V)=>J(D,X0(q,...V)),W=(V=I)=>{if(D=v(Q,V),q=v(),V.length===0)return;D=v(X,V),q=v()},N=()=>{if(w++>=O)throw Error("drbg: tried max amount of iterations");let V=0,j=[];while(V<U){q=v();let H=q.slice();j.push(H),V+=q.length}return X0(...j)};return(V,j)=>{Y(),W(V);let H=void 0;while((H=j(N()))===void 0)W();return Y(),H}}function t0($,U={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Q,X,O){if(!O&&X!=="function"&&!Object.hasOwn($,Q))throw TypeError(`param "${Q}" is invalid: expected own property`);let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw TypeError(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}var PD=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O0=BigInt(0),x$=BigInt(1),qJ=BigInt(2),W5=BigInt(3),g5=BigInt(4),V5=BigInt(5),tB=BigInt(7),N5=BigInt(8),eB=BigInt(9),Z5=BigInt(16);function u$($,U){if(U<=O0)throw Error("mod: expected positive modulus, got "+U);let J=$%U;return J>=O0?J:U+J}function e0($,U,J){if(U<O0)throw Error("pow2: expected non-negative exponent, got "+U);let G=$;while(U-- >O0)G*=G,G%=J;return G}function z5($,U){if($===O0)throw Error("invert: expected non-zero number");if(U<=O0)throw Error("invert: expected positive modulus, got "+U);let J=u$($,U),G=U,I=O0,Q=x$,X=x$,O=O0;while(J!==O0){let D=G/J,w=G-J*D,Y=I-X*D,v=Q-O*D;G=J,J=w,I=X,Q=O,X=Y,O=v}if(G!==x$)throw Error("invert: does not exist");return u$(I,U)}function _D($,U,J){let G=$;if(!G.eql(G.sqr(U),J))throw Error("Cannot find square root")}function R5($,U){let J=$,G=(J.ORDER+x$)/g5,I=J.pow(U,G);return _D(J,I,U),I}function sB($,U){let J=$,G=(J.ORDER-V5)/N5,I=J.mul(U,qJ),Q=J.pow(I,G),X=J.mul(U,Q),O=J.mul(J.mul(X,qJ),Q),q=J.mul(X,J.sub(O,J.ONE));return _D(J,q,U),q}function $S($){let U=gQ($),J=M5($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+tB)/Z5;return(O,q)=>{let D=O,w=D.pow(q,X),Y=D.mul(w,G),v=D.mul(w,I),W=D.mul(w,Q),N=D.eql(D.sqr(Y),q),g=D.eql(D.sqr(v),q);w=D.cmov(w,Y,N),Y=D.cmov(W,v,g);let V=D.eql(D.sqr(Y),q),j=D.cmov(w,Y,V);return _D(D,j,q),j}}function M5($){if($<W5)throw Error("sqrt is not defined for small field");let U=$-x$,J=0;while(U%qJ===O0)U/=qJ,J++;let G=qJ,I=gQ($);while(Y5(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return R5;let Q=I.pow(G,U),X=(U+x$)/qJ;return function(q,D){let w=q;if(w.is0(D))return D;if(Y5(w,D)!==1)throw Error("Cannot find square root");let Y=J,v=w.mul(w.ONE,Q),W=w.pow(D,U),N=w.pow(D,X);while(!w.eql(W,w.ONE)){if(w.is0(W))return w.ZERO;let g=1,V=w.sqr(W);while(!w.eql(V,w.ONE))if(g++,V=w.sqr(V),g===Y)throw Error("Cannot find square root");let j=x$<<BigInt(Y-g-1),H=w.pow(v,j);Y=g,v=w.sqr(H),W=w.mul(W,v),N=w.mul(N,H)}return N}}function US($){if($%g5===W5)return R5;if($%N5===V5)return sB;if($%Z5===eB)return $S($);return M5($)}var tU=($,U)=>(u$($,U)&x$)===x$,IS=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function BD($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=IS.reduce((G,I)=>{return G[I]="function",G},U);if(t0($,J),MU($.BYTES,"BYTES"),MU($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=x$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function JS($,U,J){let G=$;if(J<O0)throw Error("invalid exponent, negatives unsupported");if(J===O0)return G.ONE;if(J===x$)return U;let I=G.ONE,Q=U;while(J>O0){if(J&x$)I=G.mul(I,Q);Q=G.sqr(Q),J>>=x$}return I}function r8($,U,J=!1){let G=$,I=Array(U.length).fill(J?G.ZERO:void 0),Q=U.reduce((O,q,D)=>{if(G.is0(q))return O;return I[D]=O,G.mul(O,q)},G.ONE),X=G.inv(Q);return U.reduceRight((O,q,D)=>{if(G.is0(q))return O;return I[D]=G.mul(O,I[D]),G.mul(O,q)},X),I}function Y5($,U){let J=$,G=(J.ORDER-x$)/qJ,I=J.pow(U,G),Q=J.eql(I,J.ONE),X=J.eql(I,J.ZERO),O=J.eql(I,J.neg(J.ONE));if(!Q&&!X&&!O)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function GS($,U){if(U!==void 0)AD(U);if($<=O0)throw Error("invalid n length: expected positive n, got "+$);if(U!==void 0&&U<1)throw Error("invalid n length: expected positive bit length, got "+U);let J=GG($);if(U!==void 0&&U<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${U})`);let G=U!==void 0?U:J,I=Math.ceil(G/8);return{nBitLength:G,nByteLength:I}}var v5=new WeakMap;class SD{ORDER;BITS;BYTES;isLE;ZERO=O0;ONE=x$;_lengths;_mod;constructor($,U={}){if($<=x$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")Object.defineProperty(this,"sqrt",{value:U.sqrt,enumerable:!0});if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=Object.freeze(U.allowedLengths.slice());if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=GS($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,Object.freeze(this)}create($){return u$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return O0<=$&&$<this.ORDER}is0($){return $===O0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&x$)===x$}neg($){return u$(-$,this.ORDER)}eql($,U){return $===U}sqr($){return u$($*$,this.ORDER)}add($,U){return u$($+U,this.ORDER)}sub($,U){return u$($-U,this.ORDER)}mul($,U){return u$($*U,this.ORDER)}pow($,U){return JS(this,$,U)}div($,U){return u$($*z5(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return z5($,this.ORDER)}sqrt($){let U=v5.get(this);if(!U)v5.set(this,U=US(this.ORDER));return U(this,$)}toBytes($){return this.isLE?x8($,this.BYTES):vQ($,this.BYTES)}fromBytes($,U=!1){S$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?QU($):OJ($);if(X)O=u$(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return r8(this,$)}cmov($,U,J){return oU(J,"condition"),J?U:$}}Object.freeze(SD.prototype);function gQ($,U={}){return new SD($,U)}function H5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=x$)throw Error("field order must be greater than 1");let U=GG($-x$);return Math.ceil(U/8)}function LD($){let U=H5($);return U+Math.ceil(U/2)}function j5($,U,J=!1){S$($);let G=$.length,I=H5(U),Q=Math.max(LD(U),16);if(G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?QU($):OJ($),O=u$(X,U-x$)+x$;return J?x8(O,I):vQ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QG=BigInt(0),DJ=BigInt(1);function h8($,U){let J=U.negate();return $?J:U}function wJ($,U){let J=r8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function P5($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function CD($,U){P5($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=y8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function T5($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=DJ;let D=U*G,w=D+Math.abs(O)-1,Y=O===0,v=O<0,W=U%2!==0;return{nextN:q,offset:w,isZero:Y,isNeg:v,isNegF:W,offsetF:D}}var ED=new WeakMap,_5=new WeakMap;function fD($){return _5.get($)||1}function K5($){if($!==QG)throw Error("invalid wNAF")}class l8{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>QG){if(U&DJ)J=J.add(G);G=G.double(),U>>=DJ}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=CD(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=CD($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:w,isNegF:Y,offsetF:v}=T5(J,X,Q);if(J=O,D)I=I.add(h8(Y,U[v]));else G=G.add(h8(w,U[q]))}return K5(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=CD($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===QG)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=T5(J,Q,I);if(J=X,q)continue;else{let w=U[O];G=G.add(D?w.negate():w)}}return K5(J),G}getPrecomputes($,U,J){let G=ED.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);ED.set(U,G)}}return G}cached($,U,J){let G=fD($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=fD($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){P5(U,this.bits),_5.set($,U),ED.delete($)}hasCache($){return fD($)!==1}}function B5($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>QG||G>QG){if(J&DJ)Q=Q.add(I);if(G&DJ)X=X.add(I);I=I.double(),J>>=DJ,G>>=DJ}return{p1:Q,p2:X}}function A5($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return BD(U),U}else return gQ($,{isLE:J})}function VQ($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>QG))throw Error(`CURVE.${q} must be positive bigint`)}let I=A5(U.p,J.Fp,G),Q=A5(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function d8($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}function n8($,U){if(MU($),MU(U),U<0||U>4)throw Error("invalid I2OSP length: "+U);if($<0||$>2**(8*U)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:U}).fill(0);for(let G=U-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function QS($,U){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^U[G];return J}function XS($){if(!IG($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let U=typeof $==="string"?WQ($):$;if(U.length===0)throw Error("DST must be non-empty");return U}function bD($,U,J,G){if(S$($),MU(J),U=XS(U),U.length>255)U=G(X0(WQ("H2C-OVERSIZE-DST-"),U));let{outputLen:I,blockLen:Q}=G,X=Math.ceil(J/I);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let O=X0(U,n8(U.length,1)),q=new Uint8Array(Q),D=n8(J,2),w=Array(X),Y=G(X0(q,$,D,n8(0,1),O));w[0]=G(X0(Y,n8(1,1),O));for(let W=1;W<X;W++){let N=[QS(Y,w[W-1]),n8(W+1,1),O];w[W]=G(X0(...N))}return X0(...w).slice(0,J)}var S5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var L5=($,U)=>($+($>=0?U:-U)/E5)/U;function OS($,U,J){aU("scalar",$,HU,J);let[[G,I],[Q,X]]=U,O=L5(X*$,J),q=L5(-I*$,J),D=$-O*G-q*Q,w=-O*I-q*X,Y=D<HU,v=w<HU;if(Y)D=-D;if(v)w=-w;let W=y8(Math.ceil(GG(J)/2))+jI;if(D<HU||D>=W||w<HU||w>=W)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:Y,k1:D,k2neg:v,k2:w}}function uD($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function kD($,U){t0($);let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(oU(J.lowS,"lowS"),oU(J.prehash,"prehash"),J.format!==void 0)uD(J.format);return J}class C5 extends Error{constructor($=""){super($)}}var XU={Err:C5,_tlv:{encode:($,U)=>{let{Err:J}=XU;if(MU($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof U!=="string")throw TypeError('"data" expected string, got type='+typeof U);if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=m8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?m8(I.length/2|128):"";return m8($)+Q+I+U},decode($,U){let{Err:J}=XU;U=S$(U,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let w of D)X=X<<8|w;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=XU;if(YQ($),$<HU)throw new U("integer: negative integers are not allowed");let J=m8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=XU;if($.length<1)throw new U("invalid signature integer: empty");if($[0]&128)throw new U("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return OJ($)}},toSig($){let{Err:U,_int:J,_tlv:G}=XU,I=S$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:w}=G.decode(2,q);if(w.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=XU,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}};Object.freeze(XU._tlv);Object.freeze(XU._int);Object.freeze(XU);var HU=BigInt(0),jI=BigInt(1),E5=BigInt(2),NQ=BigInt(3),qS=BigInt(4);function f5($,U={}){let J=VQ("weierstrass",$,U),G=J.Fp,I=J.Fn,Q=J.CURVE,{h:X,n:O}=Q;t0(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q,allowInfinityPoint:D}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let w=k5(G,I);function Y(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function v(C,A,E){if(D&&A.is0())return Uint8Array.of(0);let{x:M,y:K}=A.toAffine(),T=G.toBytes(M);if(oU(E,"isCompressed"),E){Y();let f=!G.isOdd(K);return X0(b5(f),T)}else return X0(Uint8Array.of(4),T,G.toBytes(K))}function W(C){S$(C,void 0,"Point");let{publicKey:A,publicKeyUncompressed:E}=w,M=C.length,K=C[0],T=C.subarray(1);if(D&&M===1&&K===0)return{x:G.ZERO,y:G.ZERO};if(M===A&&(K===2||K===3)){let f=G.fromBytes(T);if(!G.isValid(f))throw Error("bad point: is not on curve, wrong x");let P=V(f),u;try{u=G.sqrt(P)}catch(U$){let X$=U$ instanceof Error?": "+U$.message:"";throw Error("bad point: is not on curve, sqrt error"+X$)}Y();let y=G.isOdd(u);if((K&1)===1!==y)u=G.neg(u);return{x:f,y:u}}else if(M===E&&K===4){let f=G.BYTES,P=G.fromBytes(T.subarray(0,f)),u=G.fromBytes(T.subarray(f,f*2));if(!j(P,u))throw Error("bad point: is not on curve");return{x:P,y:u}}else throw Error(`bad point: got length ${M}, expected compressed=${A} or uncompressed=${E}`)}let N=U.toBytes===void 0?v:U.toBytes,g=U.fromBytes===void 0?W:U.fromBytes;function V(C){let A=G.sqr(C),E=G.mul(A,C);return G.add(G.add(E,G.mul(C,Q.a)),Q.b)}function j(C,A){let E=G.sqr(A),M=V(C);return G.eql(E,M)}if(!j(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let H=G.mul(G.pow(Q.a,NQ),qS),S=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(H,S)))throw Error("bad curve params: a or b");function B(C,A,E=!1){if(!G.isValid(A)||E&&G.is0(A))throw Error(`bad point coordinate ${C}`);return A}function k(C){if(!(C instanceof _))throw Error("Weierstrass Point expected")}function m(C){if(!q||!q.basises)throw Error("no endo");return OS(C,q.basises,I.ORDER)}function h(C,A,E,M,K){return E=new _(G.mul(E.X,C),E.Y,E.Z),A=h8(M,A),E=h8(K,E),A.add(E)}class _{static BASE=new _(Q.Gx,Q.Gy,G.ONE);static ZERO=new _(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(C,A,E){this.X=B("x",C),this.Y=B("y",A,!0),this.Z=B("z",E),Object.freeze(this)}static CURVE(){return Q}static fromAffine(C){let{x:A,y:E}=C||{};if(!C||!G.isValid(A)||!G.isValid(E))throw Error("invalid affine point");if(C instanceof _)throw Error("projective point not allowed");if(G.is0(A)&&G.is0(E))return _.ZERO;return new _(A,E,G.ONE)}static fromBytes(C){let A=_.fromAffine(g(S$(C,void 0,"point")));return A.assertValidity(),A}static fromHex(C){return _.fromBytes(UG(C))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(C=8,A=!0){if(t.createCache(this,C),!A)this.multiply(NQ);return this}assertValidity(){let C=this;if(C.is0()){if(U.allowInfinityPoint&&G.is0(C.X)&&G.eql(C.Y,G.ONE)&&G.is0(C.Z))return;throw Error("bad point: ZERO")}let{x:A,y:E}=C.toAffine();if(!G.isValid(A)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!j(A,E))throw Error("bad point: equation left != right");if(!C.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:C}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(C)}equals(C){k(C);let{X:A,Y:E,Z:M}=this,{X:K,Y:T,Z:f}=C,P=G.eql(G.mul(A,f),G.mul(K,M)),u=G.eql(G.mul(E,f),G.mul(T,M));return P&&u}negate(){return new _(this.X,G.neg(this.Y),this.Z)}double(){let{a:C,b:A}=Q,E=G.mul(A,NQ),{X:M,Y:K,Z:T}=this,f=G.ZERO,P=G.ZERO,u=G.ZERO,y=G.mul(M,M),n=G.mul(K,K),U$=G.mul(T,T),X$=G.mul(M,K);return X$=G.add(X$,X$),u=G.mul(M,T),u=G.add(u,u),f=G.mul(C,u),P=G.mul(E,U$),P=G.add(f,P),f=G.sub(n,P),P=G.add(n,P),P=G.mul(f,P),f=G.mul(X$,f),u=G.mul(E,u),U$=G.mul(C,U$),X$=G.sub(y,U$),X$=G.mul(C,X$),X$=G.add(X$,u),u=G.add(y,y),y=G.add(u,y),y=G.add(y,U$),y=G.mul(y,X$),P=G.add(P,y),U$=G.mul(K,T),U$=G.add(U$,U$),y=G.mul(U$,X$),f=G.sub(f,y),u=G.mul(U$,n),u=G.add(u,u),u=G.add(u,u),new _(f,P,u)}add(C){k(C);let{X:A,Y:E,Z:M}=this,{X:K,Y:T,Z:f}=C,P=G.ZERO,u=G.ZERO,y=G.ZERO,n=Q.a,U$=G.mul(Q.b,NQ),X$=G.mul(A,K),q$=G.mul(E,T),Y$=G.mul(M,f),V$=G.add(A,E),W$=G.add(K,T);V$=G.mul(V$,W$),W$=G.add(X$,q$),V$=G.sub(V$,W$),W$=G.add(A,M);let g$=G.add(K,f);return W$=G.mul(W$,g$),g$=G.add(X$,Y$),W$=G.sub(W$,g$),g$=G.add(E,M),P=G.add(T,f),g$=G.mul(g$,P),P=G.add(q$,Y$),g$=G.sub(g$,P),y=G.mul(n,W$),P=G.mul(U$,Y$),y=G.add(P,y),P=G.sub(q$,y),y=G.add(q$,y),u=G.mul(P,y),q$=G.add(X$,X$),q$=G.add(q$,X$),Y$=G.mul(n,Y$),W$=G.mul(U$,W$),q$=G.add(q$,Y$),Y$=G.sub(X$,Y$),Y$=G.mul(n,Y$),W$=G.add(W$,Y$),X$=G.mul(q$,W$),u=G.add(u,X$),X$=G.mul(g$,W$),P=G.mul(V$,P),P=G.sub(P,X$),X$=G.mul(V$,q$),y=G.mul(g$,y),y=G.add(y,X$),new _(P,u,y)}subtract(C){return k(C),this.add(C.negate())}is0(){return this.equals(_.ZERO)}multiply(C){let{endo:A}=U;if(!I.isValidNot0(C))throw RangeError("invalid scalar: out of range");let E,M,K=(T)=>t.cached(this,T,(f)=>wJ(_,f));if(A){let{k1neg:T,k1:f,k2neg:P,k2:u}=m(C),{p:y,f:n}=K(f),{p:U$,f:X$}=K(u);M=n.add(X$),E=h(A.beta,y,U$,T,P)}else{let{p:T,f}=K(C);E=T,M=f}return wJ(_,[E,M])[0]}multiplyUnsafe(C){let{endo:A}=U,E=this,M=C;if(!I.isValid(M))throw RangeError("invalid scalar: out of range");if(M===HU||E.is0())return _.ZERO;if(M===jI)return E;if(t.hasCache(this))return this.multiply(M);if(A){let{k1neg:K,k1:T,k2neg:f,k2:P}=m(M),{p1:u,p2:y}=B5(_,E,T,P);return h(A.beta,u,y,K,f)}else return t.unsafe(E,M)}toAffine(C){let A=this,E=C,{X:M,Y:K,Z:T}=A;if(G.eql(T,G.ONE))return{x:M,y:K};let f=A.is0();if(E==null)E=f?G.ONE:G.inv(T);let P=G.mul(M,E),u=G.mul(K,E),y=G.mul(T,E);if(f)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:u}}isTorsionFree(){let{isTorsionFree:C}=U;if(X===jI)return!0;if(C)return C(_,this);return t.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:C}=U;if(X===jI)return this;if(C)return C(_,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===jI)return this.is0();return this.clearCofactor().is0()}toBytes(C=!0){return oU(C,"isCompressed"),this.assertValidity(),N(_,this,C)}toHex(C=!0){return $G(this.toBytes(C))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let x=I.BITS,t=new l8(_,U.endo?Math.ceil(x/2):x);if(x>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function b5($){return Uint8Array.of($?2:3)}function k5($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function DS($,U={}){let{Fn:J}=$,G=U.randomBytes===void 0?JG:U.randomBytes,I=Object.assign(k5($.Fp,J),{seed:Math.max(LD(J.ORDER),16)});function Q(W){try{let N=J.fromBytes(W);return J.isValidNot0(N)}catch(N){return!1}}function X(W,N){let{publicKey:g,publicKeyUncompressed:V}=I;try{let j=W.length;if(N===!0&&j!==g)return!1;if(N===!1&&j!==V)return!1;return!!$.fromBytes(W)}catch(j){return!1}}function O(W){return W=W===void 0?G(I.seed):W,j5(S$(W,I.seed,"seed"),J.ORDER)}function q(W,N=!0){return $.BASE.multiply(J.fromBytes(W)).toBytes(N)}function D(W){let{secretKey:N,publicKey:g,publicKeyUncompressed:V}=I,j=J._lengths;if(!IG(W))return;let H=S$(W,void 0,"key").length,S=H===g||H===V,B=H===N||!!j?.includes(H);if(S&&B)return;return S}function w(W,N,g=!0){if(D(W)===!0)throw Error("first arg must be private key");if(D(N)===!1)throw Error("second arg must be public key");let V=J.fromBytes(W);return $.fromBytes(N).multiply(V).toBytes(g)}let Y={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},v=d8(O,q);return Object.freeze(Y),Object.freeze(I),Object.freeze({getPublicKey:q,getSharedSecret:w,keygen:v,Point:$,utils:Y,lengths:I})}function u5($,U,J={}){let G=U;mU(G),t0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let I=J.randomBytes===void 0?JG:J.randomBytes,Q=J.hmac===void 0?(K,T)=>WU(G,K,T):J.hmac,{Fp:X,Fn:O}=$,{ORDER:q,BITS:D}=O,{keygen:w,getPublicKey:Y,getSharedSecret:v,utils:W,lengths:N}=DS($,J),g={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},V=q*E5+jI<X.ORDER;function j(K){let T=q>>jI;return K>T}function H(K,T){if(!O.isValidNot0(T))throw Error(`invalid signature ${K}: out of range 1..Point.Fn.ORDER`);return T}function S(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function B(K,T){uD(T);let f=N.signature,P=T==="compact"?f:T==="recovered"?f+1:void 0;return S$(K,P)}class k{r;s;recovery;constructor(K,T,f){if(this.r=H("r",K),this.s=H("s",T),f!=null){if(S(),![0,1,2,3].includes(f))throw Error("invalid recovery id");this.recovery=f}Object.freeze(this)}static fromBytes(K,T=g.format){B(K,T);let f;if(T==="der"){let{r:n,s:U$}=XU.toSig(S$(K));return new k(n,U$)}if(T==="recovered")f=K[0],T="compact",K=K.subarray(1);let P=N.signature/2,u=K.subarray(0,P),y=K.subarray(P,P*2);return new k(O.fromBytes(u),O.fromBytes(y),f)}static fromHex(K,T){return this.fromBytes(UG(K),T)}assertRecovery(){let{recovery:K}=this;if(K==null)throw Error("invalid recovery id: must be present");return K}addRecoveryBit(K){return new k(this.r,this.s,K)}recoverPublicKey(K){let{r:T,s:f}=this,P=this.assertRecovery(),u=P===2||P===3?T+q:T;if(!X.isValid(u))throw Error("invalid recovery id: sig.r+curve.n != R.x");let y=X.toBytes(u),n=$.fromBytes(X0(b5((P&1)===0),y)),U$=O.inv(u),X$=h(S$(K,void 0,"msgHash")),q$=O.create(-X$*U$),Y$=O.create(f*U$),V$=$.BASE.multiplyUnsafe(q$).add(n.multiplyUnsafe(Y$));if(V$.is0())throw Error("invalid recovery: point at infinify");return V$.assertValidity(),V$}hasHighS(){return j(this.s)}toBytes(K=g.format){if(uD(K),K==="der")return UG(XU.hexFromSig(this));let{r:T,s:f}=this,P=O.toBytes(T),u=O.toBytes(f);if(K==="recovered")return S(),X0(Uint8Array.of(this.assertRecovery()),P,u);return X0(P,u)}toHex(K){return $G(this.toBytes(K))}}Object.freeze(k.prototype),Object.freeze(k);let m=J.bits2int===void 0?function(T){if(T.length>8192)throw Error("input is too large");let f=OJ(T),P=T.length*8-D;return P>0?f>>BigInt(P):f}:J.bits2int,h=J.bits2int_modN===void 0?function(T){return O.create(m(T))}:J.bits2int_modN,_=y8(D);function x(K){return aU("num < 2^"+D,K,HU,_),O.toBytes(K)}function t(K,T){return S$(K,void 0,"message"),T?S$(G(K),void 0,"prehashed message"):K}function C(K,T,f){let{lowS:P,prehash:u,extraEntropy:y}=kD(f,g);K=t(K,u);let n=h(K),U$=O.fromBytes(T);if(!O.isValidNot0(U$))throw Error("invalid private key");let X$=[x(U$),x(n)];if(y!=null&&y!==!1){let W$=y===!0?I(N.secretKey):y;X$.push(S$(W$,void 0,"extraEntropy"))}let q$=X0(...X$),Y$=n;function V$(W$){let g$=m(W$);if(!O.isValidNot0(g$))return;let M$=O.inv(g$),f$=$.BASE.multiply(g$).toAffine(),k$=O.create(f$.x);if(k$===HU)return;let D0=O.create(M$*O.create(Y$+k$*U$));if(D0===HU)return;let w0=(f$.x===k$?0:2)|Number(f$.y&jI),L0=D0;if(P&&j(D0))L0=O.neg(D0),w0^=1;return new k(k$,L0,V?void 0:w0)}return{seed:q$,k2sig:V$}}function A(K,T,f={}){let{seed:P,k2sig:u}=C(K,T,f);return w5(G.outputLen,O.BYTES,Q)(P,u).toBytes(f.format)}function E(K,T,f,P={}){let{lowS:u,prehash:y,format:n}=kD(P,g);if(f=S$(f,void 0,"publicKey"),T=t(T,y),!IG(K)){let U$=K instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+U$)}B(K,n);try{let U$=k.fromBytes(K,n),X$=$.fromBytes(f);if(u&&U$.hasHighS())return!1;let{r:q$,s:Y$}=U$,V$=h(T),W$=O.inv(Y$),g$=O.create(V$*W$),M$=O.create(q$*W$),f$=$.BASE.multiplyUnsafe(g$).add(X$.multiplyUnsafe(M$));if(f$.is0())return!1;return O.create(f$.x)===q$}catch(U$){return!1}}function M(K,T,f={}){let{prehash:P}=kD(f,g);return T=t(T,P),k.fromBytes(K,"recovered").recoverPublicKey(T).toBytes()}return Object.freeze({keygen:w,getPublicKey:Y,getSharedSecret:v,utils:W,lengths:N,Point:$,sign:A,verify:E,recoverPublicKey:M,Signature:k,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var wS=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var zS=f5(wS),XG=u5(zS,l$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var TI=BigInt(0),f0=BigInt(1),FD=BigInt(2),YS=BigInt(8);function vS($,U,J,G){let I=$.sqr(J),Q=$.sqr(G),X=$.add($.mul(U.a,I),Q),O=$.add($.ONE,$.mul(U.d,$.mul(I,Q)));return $.eql(X,O)}function F5($,U={}){let J=U,G=VQ("edwards",$,J,J.FpFnLE),{Fp:I,Fn:Q}=G,X=G.CURVE,{h:O}=X;t0(J,{},{uvRatio:"function"});let q=FD<<BigInt(Q.BYTES*8)-f0,D=(g)=>I.create(g),w=J.uvRatio===void 0?(g,V)=>{try{return{isValid:!0,value:I.sqrt(I.div(g,V))}}catch(j){return{isValid:!1,value:TI}}}:J.uvRatio;if(!vS(I,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function Y(g,V,j=!1){let H=j?f0:TI;return aU("coordinate "+g,V,H,q),V}function v(g){if(!(g instanceof W))throw Error("EdwardsPoint expected")}class W{static BASE=new W(X.Gx,X.Gy,f0,D(X.Gx*X.Gy));static ZERO=new W(TI,f0,f0,TI);static Fp=I;static Fn=Q;X;Y;Z;T;constructor(g,V,j,H){this.X=Y("x",g),this.Y=Y("y",V),this.Z=Y("z",j,!0),this.T=Y("t",H),Object.freeze(this)}static CURVE(){return X}static fromAffine(g){if(g instanceof W)throw Error("extended point not allowed");let{x:V,y:j}=g||{};return Y("x",V),Y("y",j),new W(V,j,f0,D(V*j))}static fromBytes(g,V=!1){let j=I.BYTES,{a:H,d:S}=X;g=HI(S$(g,j,"point")),oU(V,"zip215");let B=HI(g),k=g[j-1];B[j-1]=k&-129;let m=QU(B),h=V?q:I.ORDER;aU("point.y",m,TI,h);let _=D(m*m),x=D(_-f0),t=D(S*_-H),{isValid:C,value:A}=w(x,t);if(!C)throw Error("bad point: invalid y coordinate");let E=(A&f0)===f0,M=(k&128)!==0;if(!V&&A===TI&&M)throw Error("bad point: x=0 and x_0=1");if(M!==E)A=D(-A);return W.fromAffine({x:A,y:m})}static fromHex(g,V=!1){return W.fromBytes(UG(g),V)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,V=!0){if(N.createCache(this,g),!V)this.multiply(FD);return this}assertValidity(){let g=this,{a:V,d:j}=X;if(g.is0())throw Error("bad point: ZERO");let{X:H,Y:S,Z:B,T:k}=g,m=D(H*H),h=D(S*S),_=D(B*B),x=D(_*_),t=D(m*V),C=D(_*D(t+h)),A=D(x+D(j*D(m*h)));if(C!==A)throw Error("bad point: equation left != right (1)");let E=D(H*S),M=D(B*k);if(E!==M)throw Error("bad point: equation left != right (2)")}equals(g){v(g);let{X:V,Y:j,Z:H}=this,{X:S,Y:B,Z:k}=g,m=D(V*k),h=D(S*H),_=D(j*k),x=D(B*H);return m===h&&_===x}is0(){return this.equals(W.ZERO)}negate(){return new W(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:g}=X,{X:V,Y:j,Z:H}=this,S=D(V*V),B=D(j*j),k=D(FD*D(H*H)),m=D(g*S),h=V+j,_=D(D(h*h)-S-B),x=m+B,t=x-k,C=m-B,A=D(_*t),E=D(x*C),M=D(_*C),K=D(t*x);return new W(A,E,K,M)}add(g){v(g);let{a:V,d:j}=X,{X:H,Y:S,Z:B,T:k}=this,{X:m,Y:h,Z:_,T:x}=g,t=D(H*m),C=D(S*h),A=D(k*j*x),E=D(B*_),M=D((H+S)*(m+h)-t-C),K=E-A,T=E+A,f=D(C-V*t),P=D(M*K),u=D(T*f),y=D(M*f),n=D(K*T);return new W(P,u,n,y)}subtract(g){return v(g),this.add(g.negate())}multiply(g){if(!Q.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:V,f:j}=N.cached(this,g,(H)=>wJ(W,H));return wJ(W,[V,j])[0]}multiplyUnsafe(g){if(!Q.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===TI)return W.ZERO;if(this.is0()||g===f0)return this;return N.unsafe(this,g,(V)=>wJ(W,V))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(g){let V=this,j=g,{X:H,Y:S,Z:B}=V,k=V.is0();if(j==null)j=k?YS:I.inv(B);let m=D(H*j),h=D(S*j),_=I.mul(B,j);if(k)return{x:TI,y:f0};if(_!==f0)throw Error("invZ was invalid");return{x:m,y:h}}clearCofactor(){if(O===f0)return this;return this.multiplyUnsafe(O)}toBytes(){let{x:g,y:V}=this.toAffine(),j=I.toBytes(V);return j[j.length-1]|=g&f0?128:0,j}toHex(){return $G(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new l8(W,Q.BITS);if(Q.BITS>=8)W.BASE.precompute(8);return Object.freeze(W.prototype),Object.freeze(W),W}class mD{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){PD()}static fromHex($){PD()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return $G(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,U){return this.ep.precompute($,U),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var i8=BigInt(0),OG=BigInt(1),ZQ=BigInt(2);function WS($){return t0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function m5($){let U=WS($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X===void 0?JG:X,D=O?255:448,w=O?32:56,Y=O?BigInt(9):BigInt(5),v=O?BigInt(121665):BigInt(39081),W=O?ZQ**BigInt(254):ZQ**BigInt(447),N=O?BigInt(8)*ZQ**BigInt(251)-OG:BigInt(4)*ZQ**BigInt(445)-OG,g=W+N+OG,V=(M)=>u$(M,J),j=H(Y);function H(M){return x8(V(M),w)}function S(M){let K=HI(S$(M,w,"uCoordinate"));if(O)K[31]&=127;return V(QU(K))}function B(M){return QU(I(HI(S$(M,w,"scalar"))))}function k(M,K){let T=t(S(K),B(M));if(T===i8)throw Error("invalid private or public key received");return H(T)}function m(M){return k(M,j)}let h=m,_=k;function x(M,K,T){let f=V(M*(K-T));return K=V(K-f),T=V(T+f),{x_2:K,x_3:T}}function t(M,K){aU("u",M,i8,J),aU("scalar",K,W,g);let T=K,f=M,P=OG,u=i8,y=M,n=OG,U$=i8;for(let q$=BigInt(D-1);q$>=i8;q$--){let Y$=T>>q$&OG;U$^=Y$,{x_2:P,x_3:y}=x(U$,P,y),{x_2:u,x_3:n}=x(U$,u,n),U$=Y$;let V$=P+u,W$=V(V$*V$),g$=P-u,M$=V(g$*g$),f$=W$-M$,k$=y+n,D0=y-n,w0=V(D0*V$),L0=V(k$*g$),YU=w0+L0,vU=w0-L0;y=V(YU*YU),n=V(f*V(vU*vU)),P=V(W$*M$),u=V(f$*(W$+V(v*f$)))}({x_2:P,x_3:y}=x(U$,P,y)),{x_2:u,x_3:n}=x(U$,u,n);let X$=Q(u);return V(P*X$)}let C={secretKey:w,publicKey:w,seed:w},A=(M)=>{return M=M===void 0?q(w):M,S$(M,C.seed,"seed"),M},E={randomSecretKey:A};return Object.freeze(C),Object.freeze(E),Object.freeze({keygen:d8(A,h),getSharedSecret:_,getPublicKey:h,scalarMult:k,scalarMultBase:m,utils:E,GuBytes:j.slice(),lengths:C})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gS=BigInt(0),eU=BigInt(1),x5=BigInt(2),VS=BigInt(3),NS=BigInt(5),ZS=BigInt(8),YJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),hD=(()=>({p:YJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:ZS,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function h5($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=YJ,O=$*$%Q*$%Q,q=e0(O,x5,Q)*O%Q,D=e0(q,eU,Q)*$%Q,w=e0(D,NS,Q)*D%Q,Y=e0(w,U,Q)*w%Q,v=e0(Y,J,Q)*Y%Q,W=e0(v,G,Q)*v%Q,N=e0(W,I,Q)*W%Q,g=e0(N,I,Q)*W%Q,V=e0(g,U,Q)*w%Q;return{pow_p_5_8:e0(V,x5,Q)*$%Q,b2:O}}function RS($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var xD=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function lD($,U){let J=YJ,G=u$(U*U*U,J),I=u$(G*G*U,J),Q=h5($*I).pow_p_5_8,X=u$($*G*Q,J),O=u$(U*X*X,J),q=X,D=u$(X*xD,J),w=O===$,Y=O===u$(-$,J),v=O===u$(-$*xD,J);if(w)X=q;if(Y||v)X=D;if(tU(X,J))X=u$(-X,J);return{isValid:w||Y,value:X}}var zJ=F5(hD,{uvRatio:lD}),KI=(()=>zJ.Fp)(),l5=(()=>zJ.Fn)();var RQ=(()=>{let $=YJ;return m5({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=h5(U);return u$(e0(J,VS,$)*G,$)},adjustScalarBytes:RS})})();var yD=xD,MS=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),HS=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),jS=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),TS=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),y5=($)=>lD(eU,$),KS=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),rD=($)=>KI.create(QU($)&KS);function r5($){let{d:U}=hD,J=YJ,G=(j)=>KI.create(j),I=G(yD*$*$),Q=G((I+eU)*jS),X=BigInt(-1),O=G((X-U*I)*G(I+U)),{isValid:q,value:D}=lD(Q,O),w=G(D*$);if(!tU(w,J))w=G(-w);if(!q)D=w;if(!q)X=I;let Y=G(X*(I-eU)*TS-O),v=D*D,W=G((D+D)*O),N=G(Y*MS),g=G(eU-v),V=G(eU+v);return new zJ(G(W*V),G(g*N),G(N*V),G(W*g))}class K0 extends mD{static BASE=(()=>new K0(zJ.BASE))();static ZERO=(()=>new K0(zJ.ZERO))();static Fp=(()=>KI)();static Fn=(()=>l5)();constructor($){super($)}static fromAffine($){return new K0(zJ.fromAffine($))}assertSame($){if(!($ instanceof K0))throw Error("RistrettoPoint expected")}init($){return new K0($)}static fromBytes($){$0($,32);let{a:U,d:J}=hD,G=YJ,I=(S)=>KI.create(S),Q=rD($);if(!D5(KI.toBytes(Q),$)||tU(Q,G))throw Error("invalid ristretto255 encoding 1");let X=I(Q*Q),O=I(eU+U*X),q=I(eU-U*X),D=I(O*O),w=I(q*q),Y=I(U*J*D-w),{isValid:v,value:W}=y5(I(Y*w)),N=I(W*q),g=I(W*N*Y),V=I((Q+Q)*N);if(tU(V,G))V=I(-V);let j=I(O*g),H=I(V*j);if(!v||tU(H,G)||j===gS)throw Error("invalid ristretto255 encoding 2");return new K0(new zJ(V,j,eU,H))}static fromHex($){return K0.fromBytes(Y8($))}toBytes(){let{X:$,Y:U,Z:J,T:G}=this.ep,I=YJ,Q=(g)=>KI.create(g),X=Q(Q(J+U)*Q(J-U)),O=Q($*U),q=Q(O*O),{value:D}=y5(Q(X*q)),w=Q(D*X),Y=Q(D*O),v=Q(w*Y*G),W;if(tU(G*v,I)){let g=Q(U*yD),V=Q($*yD);$=g,U=V,W=Q(w*HS)}else W=Y;if(tU($*v,I))U=Q(-U);let N=Q((J-U)*W);if(tU(N,I))N=Q(-N);return KI.toBytes(N)}equals($){this.assertSame($);let{X:U,Y:J}=this.ep,{X:G,Y:I}=$.ep,Q=(q)=>KI.create(q),X=Q(U*I)===Q(J*G),O=Q(J*I)===Q(U*G);return X||O}is0(){return this.equals(K0.ZERO)}}Object.freeze(K0.BASE);Object.freeze(K0.ZERO);Object.freeze(K0.prototype);Object.freeze(K0);var AS=Object.freeze({Point:K0,hashToCurve($,U){let J=U?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":U.DST,G=bD($,J,64,F4);return AS.deriveToCurve(G)},hashToScalar($,U={DST:S5}){let J=bD($,U.DST,64,F4);return l5.create(QU(J))},deriveToCurve($){$0($,64);let U=rD($.subarray(0,32)),J=r5(U),G=rD($.subarray(32,64)),I=r5(G);return new K0(J.add(I))}});var d5=!1,PS=!1;async function n5($,U){if(PS)return await U();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await U();else throw J}}async function MQ($,U){return await n5(async()=>{let J=dD($)?$:await BS($),G=await crypto.subtle.importKey("raw",SS(U),{name:"X25519"},d5,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(dD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return RQ.scalarMult($,U)})}async function c8($){return await n5(async()=>{return MQ($,RQ.GuBytes)},()=>{if(dD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return RQ.scalarMultBase($)})}var _S=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function BS($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let U=new Uint8Array([..._S,...$]);return crypto.subtle.importKey("pkcs8",U,{name:"X25519"},d5,["deriveBits"])}function dD($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function SS($){return $}class nD{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let U=this.buf.indexOf(10);if(U>=0)return $.push(this.buf.subarray(0,U)),this.transcript.push(this.buf.subarray(0,U+1)),this.buf=this.buf.subarray(U+1),CS(vJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=vJ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:vJ(this.transcript)}}}function CS($){return $.forEach((U)=>{if(U<32||U>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function vJ($){let U=$.reduce((I,Q)=>I+Q.length,0),J=new Uint8Array(U),G=0;for(let I of $)J.set(I,G),G+=I.length;return J}function qG($,...U){return $.pipeThrough(new TransformStream({start(J){for(let G of U)J.enqueue(G)}}))}function HQ($){return new ReadableStream({start(U){U.enqueue($),U.close()}})}async function iD($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function i5($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function c5($,U){let J=$.getReader(),G=[],I=0;while(I<U){let{done:q,value:D}=await J.read();if(q)throw Error("stream ended before reading "+U.toString()+" bytes");G.push(D),I+=D.length}J.releaseLock();let Q=vJ(G),X=Q.subarray(0,U),O=qG($,Q.subarray(U));return{data:X,rest:O}}class jU{args;body;constructor($,U){this.args=$,this.body=U}}async function ES($){let U=await $.readLine();if(U===null)throw Error("invalid stanza");let J=U.split(" ");if(J.length<2||J.shift()!=="->")return{next:U};for(let Q of J)if(Q.length===0)throw Error("invalid stanza");let G=[];for(;;){let Q=await $.readLine();if(Q===null)throw Error("invalid stanza");let X=v0.decode(Q);if(X.length>48)throw Error("invalid stanza");if(G.push(X),X.length<48)break}let I=vJ(G);return{s:new jU(J,I)}}async function p5($){let U=new nD($),J=await U.readLine();if(J!=="age-encryption.org/v1")throw Error("invalid version "+(J??"line"));let G=[];for(;;){let{s:I,next:Q}=await ES(U);if(I!==void 0){G.push(I);continue}if(!Q.startsWith("--- "))throw Error("invalid header");let X=v0.decode(Q.slice(4)),{rest:O,transcript:q}=U.close(),D=q.slice(0,q.length-1-Q.length+3);return{stanzas:G,headerNoMAC:D,MAC:X,headerSize:q.length,rest:qG($,O)}}}function cD($){let U=[];U.push(`age-encryption.org/v1
+`)}function sN($){let U=new Map;for(let J of $){if(U.has(J.name))throw Error(`Duplicate command name: ${J.name}`);U.set(J.name,J)}return U}function r$($,U){let J=$[U];return typeof J==="string"?J:void 0}function S4($,U){let J=$[U];return typeof J==="boolean"?J:void 0}var L4={name:"@rizom/ops",version:"0.2.0-alpha.312",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};import{existsSync as lS,mkdirSync as dS,readFileSync as zw,writeFileSync as Yw}from"fs";import{dirname as nS,join as JR}from"path";function Tq($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function h$($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(`${J}expected number, got ${typeof $}`)}if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw RangeError(`${J}expected integer >= 0, got ${$}`)}}function $0($,U,J=""){let G=Tq($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function mU($){if(typeof $!=="function"||typeof $.create!=="function")throw TypeError("Hash must wrapped by utils.createHasher");if(h$($.outputLen),h$($.blockLen),$.outputLen<1)throw Error('"outputLen" must be >= 1');if($.blockLen<1)throw Error('"blockLen" must be >= 1')}function hJ($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function C4($,U){$0($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw RangeError('"digestInto() output" expected to be of length >='+J)}function E4($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function H0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function lJ($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function IU($,U){return $<<32-U|$>>>U}function P$($,U){return $<<U|$>>>32-U>>>0}var q_=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function D_($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function w_($){for(let U=0;U<$.length;U++)$[U]=D_($[U]);return $}var Kq=q_?($)=>$:w_,U7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),z_=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function f4($){if($0($),U7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=z_[$[J]];return U}var FU={_0:48,_9:57,A:65,F:70,a:97,f:102};function $7($){if($>=FU._0&&$<=FU._9)return $-FU._0;if($>=FU.A&&$<=FU.F)return $-(FU.A-10);if($>=FU.a&&$<=FU.f)return $-(FU.a-10);return}function Y8($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);if(U7)try{return Uint8Array.fromHex($)}catch(I){if(I instanceof SyntaxError)throw RangeError(I.message);throw I}let U=$.length,J=U/2;if(U%2)throw RangeError("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=$7($.charCodeAt(Q)),O=$7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw RangeError('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function Y_($){if(typeof $!=="string")throw TypeError("string expected");return new Uint8Array(new TextEncoder().encode($))}function Aq($,U=""){if(typeof $==="string")return Y_($);return $0($,void 0,U)}function Pq(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];$0(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function b4($,U){if(U!==void 0&&{}.toString.call(U)!=="[object Object]")throw TypeError("options must be object or undefined");return Object.assign($,U)}function _q($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.canXOF=G.canXOF,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function xU($=32){h$($,"bytesLength");let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");if($>65536)throw RangeError(`"bytesLength" expected <= 65536, got ${$}`);return U.getRandomValues(new Uint8Array($))}var Bq=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});class Sq{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor($,U){if(mU($),$0(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),H0(G)}update($){return hJ(this),this.iHash.update($),this}digestInto($){hJ(this),C4($,this),this.finished=!0;let U=$.subarray(0,this.outputLen);this.iHash.digestInto(U),this.oHash.update(U),this.oHash.digestInto(U),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var WU=(()=>{let $=(U,J,G)=>new Sq(U,J).update(G).digest();return $.create=(U,J)=>new Sq(U,J),$})();function v8($,U,J){if(mU($),J===void 0)J=new Uint8Array($.outputLen);return WU($,J,U)}var Lq=Uint8Array.of(0),I7=Uint8Array.of();function Cq($,U,J,G=32){mU($),h$(G,"length"),$0(U,void 0,"prk");let I=$.outputLen;if(U.length<I)throw Error('"prk" must be at least HashLen octets');if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=I7;else $0(J,void 0,"info");let X=new Uint8Array(Q*I),O=WU.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let w=0;w<Q;w++)Lq[0]=w+1,q.update(w===0?I7:D).update(J).update(Lq).digestInto(D),X.set(D,I*w),O._cloneInto(q);return O.destroy(),q.destroy(),H0(D,Lq),X.slice(0,G)}var OI=($,U,J,G,I)=>Cq($,v8($,U,J),G,I);function J7($,U,J){return $&U^~$&J}function G7($,U,J){return $&U^$&J^U&J}class k4{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=lJ(this.buffer)}update($){hJ(this),$0($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=lJ($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){hJ(this),C4($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,H0(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let w=Q;w<G;w++)U[w]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=lJ($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let w=0;w<q;w++)X.setUint32(4*w,D[w],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var yU=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),rU=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),U0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),I0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var u4=BigInt(4294967295),Q7=BigInt(32);function v_($,U=!1){if(U)return{h:Number($&u4),l:Number($>>Q7&u4)};return{h:Number($>>Q7&u4)|0,l:Number($&u4)|0}}function X7($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=v_($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var Eq=($,U,J)=>$>>>J,fq=($,U,J)=>$<<32-J|U>>>J,cI=($,U,J)=>$>>>J|U<<32-J,pI=($,U,J)=>$<<32-J|U>>>J,W8=($,U,J)=>$<<64-J|U>>>J-32,g8=($,U,J)=>$>>>J-32|U<<64-J;function gU($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var O7=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),q7=($,U,J,G)=>U+J+G+($/4294967296|0)|0,D7=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),w7=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,z7=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),Y7=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var g_=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),qI=new Uint32Array(64);class bq extends k4{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let w=0;w<16;w++,U+=4)qI[w]=$.getUint32(U,!1);for(let w=16;w<64;w++){let Y=qI[w-15],v=qI[w-2],W=IU(Y,7)^IU(Y,18)^Y>>>3,N=IU(v,17)^IU(v,19)^v>>>10;qI[w]=N+qI[w-7]+W+qI[w-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let w=0;w<64;w++){let Y=IU(X,6)^IU(X,11)^IU(X,25),v=D+Y+J7(X,O,q)+g_[w]+qI[w]|0,N=(IU(J,2)^IU(J,13)^IU(J,22))+G7(J,G,I)|0;D=q,q=O,O=X,X=Q+v|0,Q=I,I=G,G=J,J=v+N|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){H0(qI)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),H0(this.buffer)}}class v7 extends bq{A=yU[0]|0;B=yU[1]|0;C=yU[2]|0;D=yU[3]|0;E=yU[4]|0;F=yU[5]|0;G=yU[6]|0;H=yU[7]|0;constructor(){super(32)}}class V_ extends bq{A=rU[0]|0;B=rU[1]|0;C=rU[2]|0;D=rU[3]|0;E=rU[4]|0;F=rU[5]|0;G=rU[6]|0;H=rU[7]|0;constructor(){super(28)}}var W7=(()=>X7(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),N_=(()=>W7[0])(),Z_=(()=>W7[1])(),DI=new Uint32Array(80),wI=new Uint32Array(80);class V8 extends k4{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:w,Fl:Y,Gh:v,Gl:W,Hh:N,Hl:g}=this;return[$,U,J,G,I,Q,X,O,q,D,w,Y,v,W,N,g]}set($,U,J,G,I,Q,X,O,q,D,w,Y,v,W,N,g){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=w|0,this.Fl=Y|0,this.Gh=v|0,this.Gl=W|0,this.Hh=N|0,this.Hl=g|0}process($,U){for(let H=0;H<16;H++,U+=4)DI[H]=$.getUint32(U),wI[H]=$.getUint32(U+=4);for(let H=16;H<80;H++){let S=DI[H-15]|0,B=wI[H-15]|0,k=cI(S,B,1)^cI(S,B,8)^Eq(S,B,7),m=pI(S,B,1)^pI(S,B,8)^fq(S,B,7),h=DI[H-2]|0,_=wI[H-2]|0,x=cI(h,_,19)^W8(h,_,61)^Eq(h,_,6),t=pI(h,_,19)^g8(h,_,61)^fq(h,_,6),C=D7(m,t,wI[H-7],wI[H-16]),A=w7(C,k,x,DI[H-7],DI[H-16]);DI[H]=A|0,wI[H]=C|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:w,El:Y,Fh:v,Fl:W,Gh:N,Gl:g,Hh:V,Hl:j}=this;for(let H=0;H<80;H++){let S=cI(w,Y,14)^cI(w,Y,18)^W8(w,Y,41),B=pI(w,Y,14)^pI(w,Y,18)^g8(w,Y,41),k=w&v^~w&N,m=Y&W^~Y&g,h=z7(j,B,m,Z_[H],wI[H]),_=Y7(h,V,S,k,N_[H],DI[H]),x=h|0,t=cI(J,G,28)^W8(J,G,34)^W8(J,G,39),C=pI(J,G,28)^g8(J,G,34)^g8(J,G,39),A=J&I^J&X^I&X,E=G&Q^G&O^Q&O;V=N|0,j=g|0,N=v|0,g=W|0,v=w|0,W=Y|0,{h:w,l:Y}=gU(q|0,D|0,_|0,x|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=O7(x,C,E);J=q7(M,_,t,A),G=M|0}({h:J,l:G}=gU(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=gU(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=gU(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=gU(this.Dh|0,this.Dl|0,q|0,D|0),{h:w,l:Y}=gU(this.Eh|0,this.El|0,w|0,Y|0),{h:v,l:W}=gU(this.Fh|0,this.Fl|0,v|0,W|0),{h:N,l:g}=gU(this.Gh|0,this.Gl|0,N|0,g|0),{h:V,l:j}=gU(this.Hh|0,this.Hl|0,V|0,j|0),this.set(J,G,I,Q,X,O,q,D,w,Y,v,W,N,g,V,j)}roundClean(){H0(DI,wI)}destroy(){this.destroyed=!0,H0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class g7 extends V8{Ah=I0[0]|0;Al=I0[1]|0;Bh=I0[2]|0;Bl=I0[3]|0;Ch=I0[4]|0;Cl=I0[5]|0;Dh=I0[6]|0;Dl=I0[7]|0;Eh=I0[8]|0;El=I0[9]|0;Fh=I0[10]|0;Fl=I0[11]|0;Gh=I0[12]|0;Gl=I0[13]|0;Hh=I0[14]|0;Hl=I0[15]|0;constructor(){super(64)}}class R_ extends V8{Ah=U0[0]|0;Al=U0[1]|0;Bh=U0[2]|0;Bl=U0[3]|0;Ch=U0[4]|0;Cl=U0[5]|0;Dh=U0[6]|0;Dl=U0[7]|0;Eh=U0[8]|0;El=U0[9]|0;Fh=U0[10]|0;Fl=U0[11]|0;Gh=U0[12]|0;Gl=U0[13]|0;Hh=U0[14]|0;Hl=U0[15]|0;constructor(){super(48)}}var z0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),Y0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class M_ extends V8{Ah=z0[0]|0;Al=z0[1]|0;Bh=z0[2]|0;Bl=z0[3]|0;Ch=z0[4]|0;Cl=z0[5]|0;Dh=z0[6]|0;Dl=z0[7]|0;Eh=z0[8]|0;El=z0[9]|0;Fh=z0[10]|0;Fl=z0[11]|0;Gh=z0[12]|0;Gl=z0[13]|0;Hh=z0[14]|0;Hl=z0[15]|0;constructor(){super(28)}}class H_ extends V8{Ah=Y0[0]|0;Al=Y0[1]|0;Bh=Y0[2]|0;Bl=Y0[3]|0;Ch=Y0[4]|0;Cl=Y0[5]|0;Dh=Y0[6]|0;Dl=Y0[7]|0;Eh=Y0[8]|0;El=Y0[9]|0;Fh=Y0[10]|0;Fl=Y0[11]|0;Gh=Y0[12]|0;Gl=Y0[13]|0;Hh=Y0[14]|0;Hl=Y0[15]|0;constructor(){super(32)}}var l$=_q(()=>new v7,Bq(1));var F4=_q(()=>new g7,Bq(3));/*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */function h4($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function Fq($){if(!h4($))throw TypeError("Uint8Array expected")}function M7($,U){if(!Array.isArray(U))return!1;if(U.length===0)return!0;if($)return U.every((J)=>typeof J==="string");else return U.every((J)=>Number.isSafeInteger(J))}function H7($){if(typeof $!=="function")throw TypeError("function expected");return!0}function zI($,U){if(typeof U!=="string")throw TypeError(`${$}: string expected`);return!0}function Z8($){if(typeof $!=="number")throw TypeError(`number expected, got ${typeof $}`);if(!Number.isSafeInteger($))throw RangeError(`invalid integer: ${$}`)}function x4($){if(!Array.isArray($))throw TypeError("array expected")}function y4($,U){if(!M7(!0,U))throw TypeError(`${$}: array of strings expected`)}function mq($,U){if(!M7(!1,U))throw TypeError(`${$}: array of numbers expected`)}function m0(...$){let U=(Q)=>Q,J=(Q,X)=>(O)=>Q(X(O)),G=$.map((Q)=>Q.encode).reduceRight(J,U),I=$.map((Q)=>Q.decode).reduce(J,U);return{encode:G,decode:I}}function x0($){let U=typeof $==="string"?$.split(""):$,J=U.length;y4("alphabet",U);let G=new Map(U.map((I,Q)=>[I,Q]));return{encode:(I)=>{return x4(I),I.map((Q)=>{if(!Number.isSafeInteger(Q)||Q<0||Q>=J)throw Error(`alphabet.encode: digit index outside alphabet "${Q}". Allowed: ${$}`);return U[Q]})},decode:(I)=>{return x4(I),I.map((Q)=>{zI("alphabet.decode",Q);let X=G.get(Q);if(X===void 0)throw Error(`Unknown letter: "${Q}". Allowed: ${$}`);return X})}}}function y0($=""){return zI("join",$),{encode:(U)=>{return y4("join.decode",U),U.join($)},decode:(U)=>{return zI("join.decode",U),U.split($)}}}function l4($,U="="){return Z8($),zI("padding",U),{encode(J){y4("padding.encode",J);while(J.length*$%8)J.push(U);return J},decode(J){y4("padding.decode",J);let G=J.length;if(G*$%8)throw Error("padding: invalid, string should have whole number of bytes");for(;G>0&&J[G-1]===U;G--)if((G-1)*$%8===0)throw Error("padding: invalid, string has too much padding");return J.slice(0,G)}}}function j7($){return H7($),{encode:(U)=>U,decode:(U)=>$(U)}}function V7($,U,J){if(U<2)throw RangeError(`convertRadix: invalid from=${U}, base cannot be less than 2`);if(J<2)throw RangeError(`convertRadix: invalid to=${J}, base cannot be less than 2`);if(x4($),!$.length)return[];let G=0,I=[],Q=Array.from($,(O)=>{if(Z8(O),O<0||O>=U)throw Error(`invalid integer: ${O}`);return O}),X=Q.length;while(!0){let O=0,q=!0;for(let D=G;D<X;D++){let w=Q[D],Y=U*O,v=Y+w;if(!Number.isSafeInteger(v)||Y/U!==O||v-w!==Y)throw Error("convertRadix: carry overflow");let W=v/J;O=v%J;let N=Math.floor(W);if(Q[D]=N,!Number.isSafeInteger(N)||N*J+O!==v)throw Error("convertRadix: carry overflow");if(!q)continue;else if(!N)G=D;else q=!1}if(I.push(O),q)break}for(let O=0;O<$.length-1&&$[O]===0;O++)I.push(0);return I.reverse()}var T7=($,U)=>U===0?$:T7(U,$%U),r4=($,U)=>$+(U-T7($,U)),m4=(()=>{let $=[];for(let U=0;U<40;U++)$.push(2**U);return $})();function kq($,U,J,G){if(x4($),U<=0||U>32)throw RangeError(`convertRadix2: wrong from=${U}`);if(J<=0||J>32)throw RangeError(`convertRadix2: wrong to=${J}`);if(r4(U,J)>32)throw Error(`convertRadix2: carry overflow from=${U} to=${J} carryBits=${r4(U,J)}`);let I=0,Q=0,X=m4[U],O=m4[J]-1,q=[];for(let D of $){if(Z8(D),D>=X)throw Error(`convertRadix2: invalid data word=${D} from=${U}`);if(I=I<<U|D,Q+U>32)throw Error(`convertRadix2: carry overflow pos=${Q} from=${U}`);Q+=U;for(;Q>=J;Q-=J)q.push((I>>Q-J&O)>>>0);let w=m4[Q];if(w===void 0)throw Error("invalid carry");I&=w-1}if(I=I<<J-Q&O,!G&&Q>=U)throw Error("Excess padding");if(!G&&I>0)throw Error(`Non-zero padding: ${I}`);if(G&&Q>0)q.push(I>>>0);return q}function j_($){Z8($);let U=256;return{encode:(J)=>{if(!h4(J))throw TypeError("radix.encode input should be Uint8Array");return V7(Array.from(J),U,$)},decode:(J)=>{return mq("radix.decode",J),Uint8Array.from(V7(J,$,U))}}}function c0($,U=!1){if(Z8($),$<=0||$>32)throw RangeError("radix2: bits should be in (0..32]");if(r4(8,$)>32||r4($,8)>32)throw RangeError("radix2: carry overflow");return{encode:(J)=>{if(!h4(J))throw TypeError("radix2.encode input should be Uint8Array");return kq(Array.from(J),8,$,!U)},decode:(J)=>{return mq("radix2.decode",J),Uint8Array.from(kq(J,$,8,U))}}}function N7($){return H7($),function(...U){try{return $.apply(null,U)}catch(J){}}}var Nd=Object.freeze(m0(c0(4),x0("0123456789ABCDEF"),y0(""))),Zd=Object.freeze(m0(c0(5),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),l4(5),y0(""))),Rd=Object.freeze(m0(c0(5),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZ234567"),y0(""))),Md=Object.freeze(m0(c0(5),x0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),l4(5),y0(""))),Hd=Object.freeze(m0(c0(5),x0("0123456789ABCDEFGHIJKLMNOPQRSTUV"),y0(""))),jd=Object.freeze(m0(c0(5),x0("0123456789ABCDEFGHJKMNPQRSTVWXYZ"),y0(""),j7(($)=>$.toUpperCase().replace(/O/g,"0").replace(/[IL]/g,"1")))),K7=(()=>typeof Uint8Array.from([]).toBase64==="function"&&typeof Uint8Array.fromBase64==="function")(),T_=/[\t\n\f\r ]/,A7=($,U)=>{zI("base64",$);let J=U?"base64url":"base64";if($.length>0&&T_.test($))throw Error("invalid base64");return Uint8Array.fromBase64($,{alphabet:J,lastChunkHandling:"strict"})},xq=Object.freeze(K7?{encode($){return Fq($),$.toBase64()},decode($){return A7($,!1)}}:m0(c0(6),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),l4(6),y0(""))),v0=Object.freeze(m0(c0(6),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"),y0(""))),Td=Object.freeze(K7?{encode($){return Fq($),$.toBase64({alphabet:"base64url"})},decode($){return A7($,!0)}}:m0(c0(6),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),l4(6),y0(""))),Kd=Object.freeze(m0(c0(6),x0("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"),y0(""))),yq=($)=>m0(j_(58),x0($),y0("")),Ad=Object.freeze(yq("123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz")),Pd=Object.freeze(yq("123456789abcdefghijkmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ")),_d=Object.freeze(yq("rpshnaf39wBUDNEGHJKLM4PQRST7VWXYZ2bcdeCg65jkm8oFqi1tuvAxyz"));var uq=m0(x0("qpzry9x8gf2tvdw0s3jn54khce6mua7l"),y0("")),Z7=[996825010,642813549,513874426,1027748829,705979059];function N8($){let U=$>>25,J=($&33554431)<<5;for(let G=0;G<Z7.length;G++)if((U>>G&1)===1)J^=Z7[G];return J}function R7($,U,J=1){let G=$.length,I=1;for(let Q=0;Q<G;Q++){let X=$.charCodeAt(Q);if(X<33||X>126)throw Error(`Invalid prefix (${$})`);I=N8(I)^X>>5}I=N8(I);for(let Q=0;Q<G;Q++)I=N8(I)^$.charCodeAt(Q)&31;for(let Q of U)I=N8(I)^Q;for(let Q=0;Q<6;Q++)I=N8(I);return I^=J,uq.encode(kq([I%m4[30]],30,5,!1))}function P7($){let U=$==="bech32"?1:734539939,J=c0(5),G=J.decode,I=J.encode,Q=N7(G);function X(Y,v,W=90){if(zI("bech32.encode prefix",Y),h4(v))v=Array.from(v);mq("bech32.encode",v);let N=Y.length;if(N===0)throw TypeError(`Invalid prefix length ${N}`);let g=N+7+v.length;if(W!==!1&&g>W)throw TypeError(`Length ${g} exceeds limit ${W}`);let V=Y.toLowerCase(),j=R7(V,v,U);return`${V}1${uq.encode(v)}${j}`}function O(Y,v=90){zI("bech32.decode input",Y);let W=Y.length;if(W<8||v!==!1&&W>v)throw TypeError(`invalid string length: ${W} (${Y}). Expected (8..${v})`);let N=Y.toLowerCase();if(Y!==N&&Y!==Y.toUpperCase())throw Error("String must be lowercase or uppercase");let g=N.lastIndexOf("1");if(g===0||g===-1)throw Error('Letter "1" must be present between prefix and data only');let V=N.slice(0,g),j=N.slice(g+1);if(j.length<6)throw Error("Data must be at least 6 characters long");let H=uq.decode(j).slice(0,-6),S=R7(V,H,U);if(!j.endsWith(S))throw Error(`Invalid checksum in ${Y}: expected "${S}"`);return{prefix:V,words:H}}let q=N7(O);function D(Y){let{prefix:v,words:W}=O(Y,!1);return{prefix:v,words:W,bytes:G(W)}}function w(Y,v){return X(Y,I(v))}return{encode:X,decode:O,encodeFromBytes:w,decodeToBytes:D,decodeUnsafe:q,fromWords:G,fromWordsUnsafe:Q,toWords:I}}var r0=Object.freeze(P7("bech32")),Bd=Object.freeze(P7("bech32m"));var K_=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),A_={encode($){return Fq($),$.toHex()},decode($){return zI("hex",$),Uint8Array.fromHex($)}},Sd=Object.freeze(K_?A_:m0(c0(4),x0("0123456789abcdef"),y0(""),j7(($)=>{if(typeof $!=="string"||$.length%2!==0)throw TypeError(`hex.decode: expected string, got ${typeof $} with length ${$.length}`);return $.toLowerCase()})));function __($,U,J,G){mU($);let I=b4({dkLen:32,asyncTick:10},G),{c:Q,dkLen:X,asyncTick:O}=I;if(h$(Q,"c"),h$(X,"dkLen"),h$(O,"asyncTick"),Q<1)throw Error("iterations (c) must be >= 1");if(X<1)throw Error('"dkLen" must be >= 1');if(X>4294967295*$.outputLen)throw Error("derived key too long");let q=Aq(U,"password"),D=Aq(J,"salt"),w=new Uint8Array(X),Y=WU.create($,q),v=Y._cloneInto().update(D);return{c:Q,dkLen:X,asyncTick:O,DK:w,PRF:Y,PRFSalt:v}}function B_($,U,J,G,I){if($.destroy(),U.destroy(),G)G.destroy();return H0(I),J}function rq($,U,J,G){let{c:I,dkLen:Q,DK:X,PRF:O,PRFSalt:q}=__($,U,J,G),D,w=new Uint8Array(4),Y=lJ(w),v=new Uint8Array(O.outputLen);for(let W=1,N=0;N<Q;W++,N+=O.outputLen){let g=X.subarray(N,N+O.outputLen);Y.setInt32(0,W,!1),(D=q._cloneInto(D)).update(w).digestInto(v),g.set(v.subarray(0,g.length));for(let V=1;V<I;V++){O._cloneInto(D).update(v).digestInto(v);for(let j=0;j<g.length;j++)g[j]^=v[j]}}return B_(O,q,X,D,v)}function _7($,U,J,G,I,Q){let X=$[U++]^J[G++],O=$[U++]^J[G++],q=$[U++]^J[G++],D=$[U++]^J[G++],w=$[U++]^J[G++],Y=$[U++]^J[G++],v=$[U++]^J[G++],W=$[U++]^J[G++],N=$[U++]^J[G++],g=$[U++]^J[G++],V=$[U++]^J[G++],j=$[U++]^J[G++],H=$[U++]^J[G++],S=$[U++]^J[G++],B=$[U++]^J[G++],k=$[U++]^J[G++],m=X,h=O,_=q,x=D,t=w,C=Y,A=v,E=W,M=N,K=g,T=V,f=j,P=H,u=S,y=B,n=k;for(let U$=0;U$<8;U$+=2)t^=P$(m+P|0,7),M^=P$(t+m|0,9),P^=P$(M+t|0,13),m^=P$(P+M|0,18),K^=P$(C+h|0,7),u^=P$(K+C|0,9),h^=P$(u+K|0,13),C^=P$(h+u|0,18),y^=P$(T+A|0,7),_^=P$(y+T|0,9),A^=P$(_+y|0,13),T^=P$(A+_|0,18),x^=P$(n+f|0,7),E^=P$(x+n|0,9),f^=P$(E+x|0,13),n^=P$(f+E|0,18),h^=P$(m+x|0,7),_^=P$(h+m|0,9),x^=P$(_+h|0,13),m^=P$(x+_|0,18),A^=P$(C+t|0,7),E^=P$(A+C|0,9),t^=P$(E+A|0,13),C^=P$(t+E|0,18),f^=P$(T+K|0,7),M^=P$(f+T|0,9),K^=P$(M+f|0,13),T^=P$(K+M|0,18),P^=P$(n+y|0,7),u^=P$(P+n|0,9),y^=P$(u+P|0,13),n^=P$(y+u|0,18);I[Q++]=X+m|0,I[Q++]=O+h|0,I[Q++]=q+_|0,I[Q++]=D+x|0,I[Q++]=w+t|0,I[Q++]=Y+C|0,I[Q++]=v+A|0,I[Q++]=W+E|0,I[Q++]=N+M|0,I[Q++]=g+K|0,I[Q++]=V+T|0,I[Q++]=j+f|0,I[Q++]=H+P|0,I[Q++]=S+u|0,I[Q++]=B+y|0,I[Q++]=k+n|0}function hq($,U,J,G,I){let Q=G+0,X=G+16*I;for(let O=0;O<16;O++)J[X+O]=$[U+(2*I-1)*16+O];for(let O=0;O<I;O++,Q+=16,U+=16){if(_7(J,X,$,U,J,Q),O>0)X+=16;_7(J,Q,$,U+=16,J,X)}}function S_($,U,J){let G=b4({dkLen:32,asyncTick:10,maxmem:1073742848},J),{N:I,r:Q,p:X,dkLen:O,asyncTick:q,maxmem:D,onProgress:w}=G;if(h$(I,"N"),h$(Q,"r"),h$(X,"p"),h$(O,"dkLen"),h$(q,"asyncTick"),h$(D,"maxmem"),w!==void 0&&typeof w!=="function")throw Error("progressCb must be a function");let Y=128*Q,v=Y/4,W=Math.pow(2,32);if(I<=1||(I&I-1)!==0||I>W)throw Error('"N" expected a power of 2, and 2^1 <= N <= 2^32');if(X<1||X>(W-1)*32/Y)throw Error('"p" expected integer 1..((2^32 - 1) * 32) / (128 * r)');if(O<1||O>(W-1)*32)throw Error('"dkLen" expected integer 1..(2^32 - 1) * 32');let N=Y*(I+X+1);if(N>D)throw Error('"maxmem" limit was hit: memUsed(128*r*(N+p+1))='+N+", maxmem="+D);let g=rq(l$,$,U,{c:1,dkLen:Y*X}),V=E4(g),j=E4(new Uint8Array(Y*I)),H=E4(new Uint8Array(Y)),S=()=>{};if(w){let B=2*I*X,k=Math.max(Math.floor(B/1e4),1),m=0;S=()=>{if(m++,w&&(!(m%k)||m===B))w(m/B)}}return{N:I,r:Q,p:X,dkLen:O,blockSize32:v,V:j,B32:V,B:g,tmp:H,blockMixCb:S,asyncTick:q}}function L_($,U,J,G,I){let Q=rq(l$,$,J,{c:1,dkLen:U});return H0(J,G,I),Q}function lq($,U,J){let{N:G,r:I,p:Q,dkLen:X,blockSize32:O,V:q,B32:D,B:w,tmp:Y,blockMixCb:v}=S_($,U,J);Kq(D);for(let W=0;W<Q;W++){let N=O*W;for(let g=0;g<O;g++)q[g]=D[N+g];for(let g=0,V=0;g<G-1;g++)hq(q,V,q,V+=O,I),v();hq(q,(G-1)*O,D,N,I),v();for(let g=0;g<G;g++){let V=(D[N+O-16]&G-1)>>>0;for(let j=0;j<O;j++)Y[j]=D[N+j]^q[V*O+j];hq(Y,0,D,N,I),v()}}return Kq(D),L_($,X,w,q,Y)}/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function C_($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in $&&$.BYTES_PER_ELEMENT===1}function d4($){if(typeof $!=="boolean")throw TypeError(`boolean expected, not ${$}`)}function dJ($){if(typeof $!=="number")throw TypeError("number expected, got "+typeof $);if(!Number.isSafeInteger($)||$<0)throw RangeError("positive integer expected, got "+$)}function c$($,U,J=""){let G=C_($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`,D=X+"expected Uint8Array"+O+", got "+q;if(!G)throw TypeError(D);throw RangeError(D)}return $}function dq($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function B7($,U,J=!1){c$($,void 0,"output");let G=U.outputLen;if($.length<G)throw RangeError("digestInto() expects output buffer of length at least "+G);if(J&&!nJ($))throw Error("invalid output, must be aligned")}function VU($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function JU(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function E_($){return new DataView($.buffer,$.byteOffset,$.byteLength)}var oI=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)(),f_=($)=>$<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255;var b_=($)=>{for(let U=0;U<$.length;U++)$[U]=f_($[U]);return $},hU=oI?($)=>$:b_;function S7($,U){if(U==null||typeof U!=="object")throw Error("options must be defined");return Object.assign($,U)}function L7($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function C7($,U,J){let G=U,I=J||(()=>[]),Q=(O,q)=>G(q,...I(O)).update(O).digest(),X=G(new Uint8Array($),...I(new Uint8Array(0)));return Q.outputLen=X.outputLen,Q.blockLen=X.blockLen,Q.create=(O,...q)=>G(O,...q),Q}var E7=($,U)=>{function J(G,...I){if(c$(G,void 0,"key"),$.nonceLength!==void 0){let w=I[0];c$(w,$.varSizeNonce?void 0:$.nonceLength,"nonce")}let Q=$.tagLength;if(Q&&I[1]!==void 0)c$(I[1],void 0,"AAD");let X=U(G,...I),O=(w,Y)=>{if(Y!==void 0){if(w!==2)throw Error("cipher output not supported");c$(Y,void 0,"output")}},q=!1;return{encrypt(w,Y){if(q)throw Error("cannot encrypt() twice with same key + nonce");return q=!0,c$(w),O(X.encrypt.length,Y),X.encrypt(w,Y)},decrypt(w,Y){if(c$(w),Q&&w.length<Q)throw Error('"ciphertext" expected length bigger than tagLength='+Q);return O(X.decrypt.length,Y),X.decrypt(w,Y)}}}return Object.assign(J,$),J};function R8($,U,J=!0){if(U===void 0)return new Uint8Array($);if(c$(U,void 0,"output"),U.length!==$)throw Error('"output" expected Uint8Array of length '+$+", got: "+U.length);if(J&&!nJ(U))throw Error("invalid output, must be aligned");return U}function f7($,U,J){dJ($),dJ(U),d4(J);let G=new Uint8Array(16),I=E_(G);return I.setBigUint64(0,BigInt(U),J),I.setBigUint64(8,BigInt($),J),G}function nJ($){return $.byteOffset%4===0}function iJ($){return Uint8Array.from(c$($))}var k7=($)=>Uint8Array.from($.split(""),(U)=>U.charCodeAt(0)),k_=(()=>hU(VU(k7("expand 16-byte k"))))(),u_=(()=>hU(VU(k7("expand 32-byte k"))))();function _$($,U){return $<<U|$>>>32-U}var M8=64,F_=16,nq=(()=>4294967295)(),b7=Uint32Array.of();function m_($,U,J,G,I,Q,X,O){let q=I.length,D=new Uint8Array(M8),w=VU(D),Y=oI&&nJ(I)&&nJ(Q),v=Y?VU(I):b7,W=Y?VU(Q):b7;if(!oI){for(let N=0;N<q;X++){if($(U,J,G,w,X,O),hU(w),X>=nq)throw Error("arx: counter overflow");let g=Math.min(M8,q-N);for(let V=0,j;V<g;V++)j=N+V,Q[j]=I[j]^D[V];N+=g}return}for(let N=0;N<q;X++){if($(U,J,G,w,X,O),X>=nq)throw Error("arx: counter overflow");let g=Math.min(M8,q-N);if(Y&&g===M8){let V=N/4;if(N%4!==0)throw Error("arx: invalid block position");for(let j=0,H;j<F_;j++)H=V+j,W[H]=v[H]^w[j];N+=M8;continue}for(let V=0,j;V<g;V++)j=N+V,Q[j]=I[j]^D[V];N+=g}}function u7($,U){let{allowShortKeys:J,extendNonceFn:G,counterLength:I,counterRight:Q,rounds:X}=S7({allowShortKeys:!1,counterLength:8,counterRight:!1,rounds:20},U);if(typeof $!=="function")throw Error("core must be a function");return dJ(I),dJ(X),d4(Q),d4(J),(O,q,D,w,Y=0)=>{c$(O,void 0,"key"),c$(q,void 0,"nonce"),c$(D,void 0,"data");let v=D.length;if(w=R8(v,w,!1),dJ(Y),Y<0||Y>=nq)throw Error("arx: counter overflow");let W=[],N=O.length,g,V;if(N===32)W.push(g=iJ(O)),V=u_;else if(N===16&&J)g=new Uint8Array(32),g.set(O),g.set(O,16),V=k_,W.push(g);else throw c$(O,32,"arx key"),Error("invalid key size");if(!oI||!nJ(q))W.push(q=iJ(q));let j=VU(g);if(G){if(q.length!==24)throw Error("arx: extended nonce must be 24 bytes");let B=q.subarray(0,16);if(oI)G(V,j,VU(B),j);else{let k=hU(Uint32Array.from(V));G(k,j,VU(B),j),JU(k),hU(j)}q=q.subarray(16)}else if(!oI)hU(j);let H=16-I;if(H!==q.length)throw Error(`arx: nonce must be ${H} or 16 bytes`);if(H!==12){let B=new Uint8Array(12);B.set(q,Q?0:12-q.length),q=B,W.push(q)}let S=hU(VU(q));try{return m_($,V,j,S,D,w,Y,X),w}finally{JU(...W)}}}function J0($,U){return $[U++]&255|($[U++]&255)<<8}class F7{blockLen=16;outputLen=16;buffer=new Uint8Array(16);r=new Uint16Array(10);h=new Uint16Array(10);pad=new Uint16Array(8);pos=0;finished=!1;destroyed=!1;constructor($){$=iJ(c$($,32,"key"));let U=J0($,0),J=J0($,2),G=J0($,4),I=J0($,6),Q=J0($,8),X=J0($,10),O=J0($,12),q=J0($,14);this.r[0]=U&8191,this.r[1]=(U>>>13|J<<3)&8191,this.r[2]=(J>>>10|G<<6)&7939,this.r[3]=(G>>>7|I<<9)&8191,this.r[4]=(I>>>4|Q<<12)&255,this.r[5]=Q>>>1&8190,this.r[6]=(Q>>>14|X<<2)&8191,this.r[7]=(X>>>11|O<<5)&8065,this.r[8]=(O>>>8|q<<8)&8191,this.r[9]=q>>>5&127;for(let D=0;D<8;D++)this.pad[D]=J0($,16+2*D)}process($,U,J=!1){let G=J?0:2048,{h:I,r:Q}=this,X=Q[0],O=Q[1],q=Q[2],D=Q[3],w=Q[4],Y=Q[5],v=Q[6],W=Q[7],N=Q[8],g=Q[9],V=J0($,U+0),j=J0($,U+2),H=J0($,U+4),S=J0($,U+6),B=J0($,U+8),k=J0($,U+10),m=J0($,U+12),h=J0($,U+14),_=I[0]+(V&8191),x=I[1]+((V>>>13|j<<3)&8191),t=I[2]+((j>>>10|H<<6)&8191),C=I[3]+((H>>>7|S<<9)&8191),A=I[4]+((S>>>4|B<<12)&8191),E=I[5]+(B>>>1&8191),M=I[6]+((B>>>14|k<<2)&8191),K=I[7]+((k>>>11|m<<5)&8191),T=I[8]+((m>>>8|h<<8)&8191),f=I[9]+(h>>>5|G),P=0,u=P+_*X+x*(5*g)+t*(5*N)+C*(5*W)+A*(5*v);P=u>>>13,u&=8191,u+=E*(5*Y)+M*(5*w)+K*(5*D)+T*(5*q)+f*(5*O),P+=u>>>13,u&=8191;let y=P+_*O+x*X+t*(5*g)+C*(5*N)+A*(5*W);P=y>>>13,y&=8191,y+=E*(5*v)+M*(5*Y)+K*(5*w)+T*(5*D)+f*(5*q),P+=y>>>13,y&=8191;let n=P+_*q+x*O+t*X+C*(5*g)+A*(5*N);P=n>>>13,n&=8191,n+=E*(5*W)+M*(5*v)+K*(5*Y)+T*(5*w)+f*(5*D),P+=n>>>13,n&=8191;let U$=P+_*D+x*q+t*O+C*X+A*(5*g);P=U$>>>13,U$&=8191,U$+=E*(5*N)+M*(5*W)+K*(5*v)+T*(5*Y)+f*(5*w),P+=U$>>>13,U$&=8191;let X$=P+_*w+x*D+t*q+C*O+A*X;P=X$>>>13,X$&=8191,X$+=E*(5*g)+M*(5*N)+K*(5*W)+T*(5*v)+f*(5*Y),P+=X$>>>13,X$&=8191;let q$=P+_*Y+x*w+t*D+C*q+A*O;P=q$>>>13,q$&=8191,q$+=E*X+M*(5*g)+K*(5*N)+T*(5*W)+f*(5*v),P+=q$>>>13,q$&=8191;let Y$=P+_*v+x*Y+t*w+C*D+A*q;P=Y$>>>13,Y$&=8191,Y$+=E*O+M*X+K*(5*g)+T*(5*N)+f*(5*W),P+=Y$>>>13,Y$&=8191;let V$=P+_*W+x*v+t*Y+C*w+A*D;P=V$>>>13,V$&=8191,V$+=E*q+M*O+K*X+T*(5*g)+f*(5*N),P+=V$>>>13,V$&=8191;let W$=P+_*N+x*W+t*v+C*Y+A*w;P=W$>>>13,W$&=8191,W$+=E*D+M*q+K*O+T*X+f*(5*g),P+=W$>>>13,W$&=8191;let g$=P+_*g+x*N+t*W+C*v+A*Y;P=g$>>>13,g$&=8191,g$+=E*w+M*D+K*q+T*O+f*X,P+=g$>>>13,g$&=8191,P=(P<<2)+P|0,P=P+u|0,u=P&8191,P=P>>>13,y+=P,I[0]=u,I[1]=y,I[2]=n,I[3]=U$,I[4]=X$,I[5]=q$,I[6]=Y$,I[7]=V$,I[8]=W$,I[9]=g$}finalize(){let{h:$,pad:U}=this,J=new Uint16Array(10),G=$[1]>>>13;$[1]&=8191;for(let X=2;X<10;X++)$[X]+=G,G=$[X]>>>13,$[X]&=8191;$[0]+=G*5,G=$[0]>>>13,$[0]&=8191,$[1]+=G,G=$[1]>>>13,$[1]&=8191,$[2]+=G,J[0]=$[0]+5,G=J[0]>>>13,J[0]&=8191;for(let X=1;X<10;X++)J[X]=$[X]+G,G=J[X]>>>13,J[X]&=8191;J[9]-=8192;let I=(G^1)-1;for(let X=0;X<10;X++)J[X]&=I;I=~I;for(let X=0;X<10;X++)$[X]=$[X]&I|J[X];$[0]=($[0]|$[1]<<13)&65535,$[1]=($[1]>>>3|$[2]<<10)&65535,$[2]=($[2]>>>6|$[3]<<7)&65535,$[3]=($[3]>>>9|$[4]<<4)&65535,$[4]=($[4]>>>12|$[5]<<1|$[6]<<14)&65535,$[5]=($[6]>>>2|$[7]<<11)&65535,$[6]=($[7]>>>5|$[8]<<8)&65535,$[7]=($[8]>>>8|$[9]<<5)&65535;let Q=$[0]+U[0];$[0]=Q&65535;for(let X=1;X<8;X++)Q=($[X]+U[X]|0)+(Q>>>16)|0,$[X]=Q&65535;JU(J)}update($){dq(this),c$($),$=iJ($);let{buffer:U,blockLen:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(J-this.pos,G-I);if(Q===J){for(;J<=G-I;I+=J)this.process($,I);continue}if(U.set($.subarray(I,I+Q),this.pos),this.pos+=Q,I+=Q,this.pos===J)this.process(U,0,!1),this.pos=0}return this}destroy(){this.destroyed=!0,JU(this.h,this.r,this.buffer,this.pad)}digestInto($){dq(this),B7($,this),this.finished=!0;let{buffer:U,h:J}=this,{pos:G}=this;if(G){U[G++]=1;for(;G<16;G++)U[G]=0;this.process(U,0,!0)}this.finalize();let I=0;for(let Q=0;Q<8;Q++)$[I++]=J[Q]>>>0,$[I++]=J[Q]>>>8}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}}var m7=C7(32,($)=>new F7($));function x_($,U,J,G,I,Q=20){let X=$[0],O=$[1],q=$[2],D=$[3],w=U[0],Y=U[1],v=U[2],W=U[3],N=U[4],g=U[5],V=U[6],j=U[7],H=I,S=J[0],B=J[1],k=J[2],m=X,h=O,_=q,x=D,t=w,C=Y,A=v,E=W,M=N,K=g,T=V,f=j,P=H,u=S,y=B,n=k;for(let X$=0;X$<Q;X$+=2)m=m+t|0,P=_$(P^m,16),M=M+P|0,t=_$(t^M,12),m=m+t|0,P=_$(P^m,8),M=M+P|0,t=_$(t^M,7),h=h+C|0,u=_$(u^h,16),K=K+u|0,C=_$(C^K,12),h=h+C|0,u=_$(u^h,8),K=K+u|0,C=_$(C^K,7),_=_+A|0,y=_$(y^_,16),T=T+y|0,A=_$(A^T,12),_=_+A|0,y=_$(y^_,8),T=T+y|0,A=_$(A^T,7),x=x+E|0,n=_$(n^x,16),f=f+n|0,E=_$(E^f,12),x=x+E|0,n=_$(n^x,8),f=f+n|0,E=_$(E^f,7),m=m+C|0,n=_$(n^m,16),T=T+n|0,C=_$(C^T,12),m=m+C|0,n=_$(n^m,8),T=T+n|0,C=_$(C^T,7),h=h+A|0,P=_$(P^h,16),f=f+P|0,A=_$(A^f,12),h=h+A|0,P=_$(P^h,8),f=f+P|0,A=_$(A^f,7),_=_+E|0,u=_$(u^_,16),M=M+u|0,E=_$(E^M,12),_=_+E|0,u=_$(u^_,8),M=M+u|0,E=_$(E^M,7),x=x+t|0,y=_$(y^x,16),K=K+y|0,t=_$(t^K,12),x=x+t|0,y=_$(y^x,8),K=K+y|0,t=_$(t^K,7);let U$=0;G[U$++]=X+m|0,G[U$++]=O+h|0,G[U$++]=q+_|0,G[U$++]=D+x|0,G[U$++]=w+t|0,G[U$++]=Y+C|0,G[U$++]=v+A|0,G[U$++]=W+E|0,G[U$++]=N+M|0,G[U$++]=g+K|0,G[U$++]=V+T|0,G[U$++]=j+f|0,G[U$++]=H+P|0,G[U$++]=S+u|0,G[U$++]=B+y|0,G[U$++]=k+n|0}var y_=u7(x_,{counterRight:!1,counterLength:4,allowShortKeys:!1});var r_=new Uint8Array(16),x7=($,U)=>{$.update(U);let J=U.length%16;if(J)$.update(r_.subarray(J))},h_=new Uint8Array(32);function y7($,U,J,G,I){if(I!==void 0)c$(I,void 0,"AAD");let Q=$(U,J,h_),X=f7(G.length,I?I.length:0,!0),O=m7.create(Q);if(I)x7(O,I);x7(O,G),O.update(X);let q=O.digest();return JU(Q,X),q}var l_=($)=>(U,J,G)=>{return{encrypt(Q,X){let O=Q.length;X=R8(O+16,X,!1),X.set(Q);let q=X.subarray(0,-16);$(U,J,q,q,1);let D=y7($,U,J,q,G);return X.set(D,O),JU(D),X},decrypt(Q,X){X=R8(Q.length-16,X,!1);let O=Q.subarray(0,-16),q=Q.subarray(-16),D=y7($,U,J,O,G);if(!L7(q,D))throw JU(D),Error("invalid tag");return X.set(Q.subarray(0,-16)),$(U,J,X,X,1),JU(D),X}}},p0=E7({blockSize:64,nonceLength:12,tagLength:16},l_(y_));/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function cJ($){return $ instanceof Uint8Array||ArrayBuffer.isView($)&&$.constructor.name==="Uint8Array"}function t$($,U=""){if(!Number.isSafeInteger($)||$<0){let J=U&&`"${U}" `;throw Error(`${J}expected integer >= 0, got ${$}`)}}function Z$($,U,J=""){let G=cJ($),I=$?.length,Q=U!==void 0;if(!G||Q&&I!==U){let X=J&&`"${J}" `,O=Q?` of length ${U}`:"",q=G?`length=${I}`:`type=${typeof $}`;throw Error(X+"expected Uint8Array"+O+", got "+q)}return $}function o0($){if(typeof $!=="function"||typeof $.create!=="function")throw Error("Hash must wrapped by utils.createHasher");t$($.outputLen),t$($.blockLen)}function dU($,U=!0){if($.destroyed)throw Error("Hash instance has been destroyed");if(U&&$.finished)throw Error("Hash#digest() has already been called")}function n4($,U){Z$($,void 0,"digestInto() output");let J=U.outputLen;if($.length<J)throw Error('"digestInto() output" expected to be of length >='+J)}function i4($){return new Uint32Array($.buffer,$.byteOffset,Math.floor($.byteLength/4))}function E0(...$){for(let U=0;U<$.length;U++)$[U].fill(0)}function c4($){return new DataView($.buffer,$.byteOffset,$.byteLength)}function GU($,U){return $<<32-U|$>>>U}var d_=(()=>new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68)();function n_($){return $<<24&4278190080|$<<8&16711680|$>>>8&65280|$>>>24&255}function i_($){for(let U=0;U<$.length;U++)$[U]=n_($[U]);return $}var iq=d_?($)=>$:i_,h7=(()=>typeof Uint8Array.from([]).toHex==="function"&&typeof Uint8Array.fromHex==="function")(),c_=Array.from({length:256},($,U)=>U.toString(16).padStart(2,"0"));function aI($){if(Z$($),h7)return $.toHex();let U="";for(let J=0;J<$.length;J++)U+=c_[$[J]];return U}var lU={_0:48,_9:57,A:65,F:70,a:97,f:102};function r7($){if($>=lU._0&&$<=lU._9)return $-lU._0;if($>=lU.A&&$<=lU.F)return $-(lU.A-10);if($>=lU.a&&$<=lU.f)return $-(lU.a-10);return}function tI($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);if(h7)return Uint8Array.fromHex($);let U=$.length,J=U/2;if(U%2)throw Error("hex string expected, got unpadded hex of length "+U);let G=new Uint8Array(J);for(let I=0,Q=0;I<J;I++,Q+=2){let X=r7($.charCodeAt(Q)),O=r7($.charCodeAt(Q+1));if(X===void 0||O===void 0){let q=$[Q]+$[Q+1];throw Error('hex string expected, got non-hex character "'+q+'" at index '+Q)}G[I]=X*16+O}return G}function d$(...$){let U=0;for(let G=0;G<$.length;G++){let I=$[G];Z$(I),U+=I.length}let J=new Uint8Array(U);for(let G=0,I=0;G<$.length;G++){let Q=$[G];J.set(Q,I),I+=Q.length}return J}function pJ($,U={}){let J=(I,Q)=>$(Q).update(I).digest(),G=$(void 0);return J.outputLen=G.outputLen,J.blockLen=G.blockLen,J.create=(I)=>$(I),Object.assign(J,U),Object.freeze(J)}function YI($=32){let U=typeof globalThis==="object"?globalThis.crypto:null;if(typeof U?.getRandomValues!=="function")throw Error("crypto.getRandomValues must be defined");return U.getRandomValues(new Uint8Array($))}var vI=($)=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,$])});/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var pq=BigInt(0),cq=BigInt(1);function H8($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw Error(J+"expected boolean, got type="+typeof $)}return $}function l7($){if(typeof $==="bigint"){if(!p4($))throw Error("positive bigint expected, got "+$)}else t$($);return $}function j8($){let U=l7($).toString(16);return U.length&1?"0"+U:U}function d7($){if(typeof $!=="string")throw Error("hex string expected, got "+typeof $);return $===""?pq:BigInt("0x"+$)}function WI($){return d7(aI($))}function gI($){return d7(aI(o4(Z$($)).reverse()))}function oJ($,U){t$(U),$=l7($);let J=tI($.toString(16).padStart(U*2,"0"));if(J.length!==U)throw Error("number too large");return J}function T8($,U){return oJ($,U).reverse()}function o4($){return Uint8Array.from($)}function VI($){return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw Error(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var p4=($)=>typeof $==="bigint"&&pq<=$;function p_($,U,J){return p4($)&&p4(U)&&p4(J)&&U<=$&&$<J}function K8($,U,J,G){if(!p_(U,J,G))throw Error("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function oq($){let U;for(U=0;$>pq;$>>=cq,U+=1);return U}var A8=($)=>(cq<<BigInt($))-cq;function n7($,U,J){if(t$($,"hashLen"),t$(U,"qByteLen"),typeof J!=="function")throw Error("hmacFn must be a function");let G=(V)=>new Uint8Array(V),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),w=0,Y=()=>{q.fill(1),D.fill(0),w=0},v=(...V)=>J(D,d$(q,...V)),W=(V=I)=>{if(D=v(Q,V),q=v(),V.length===0)return;D=v(X,V),q=v()},N=()=>{if(w++>=O)throw Error("drbg: tried max amount of iterations");let V=0,j=[];while(V<U){q=v();let H=q.slice();j.push(H),V+=q.length}return d$(...j)};return(V,j)=>{Y(),W(V);let H=void 0;while(!(H=j(N())))W();return Y(),H}}function eI($,U={},J={}){if(!$||typeof $!=="object")throw Error("expected valid options object");function G(Q,X,O){let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw Error(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}function aq($){let U=new WeakMap;return(J,...G)=>{let I=U.get(J);if(I!==void 0)return I;let Q=$(J,...G);return U.set(J,Q),Q}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var T0=BigInt(0),W0=BigInt(1),sI=BigInt(2),p7=BigInt(3),o7=BigInt(4),a7=BigInt(5),o_=BigInt(7),t7=BigInt(8),a_=BigInt(9),e7=BigInt(16);function j0($,U){let J=$%U;return J>=T0?J:U+J}function a0($,U,J){let G=$;while(U-- >T0)G*=G,G%=J;return G}function i7($,U){if($===T0)throw Error("invert: expected non-zero number");if(U<=T0)throw Error("invert: expected positive modulus, got "+U);let J=j0($,U),G=U,I=T0,Q=W0,X=W0,O=T0;while(J!==T0){let D=G/J,w=G%J,Y=I-X*D,v=Q-O*D;G=J,J=w,I=X,Q=O,X=Y,O=v}if(G!==W0)throw Error("invert: does not exist");return j0(I,U)}function tq($,U,J){if(!$.eql($.sqr(U),J))throw Error("Cannot find square root")}function s7($,U){let J=($.ORDER+W0)/o7,G=$.pow(U,J);return tq($,G,U),G}function t_($,U){let J=($.ORDER-a7)/t7,G=$.mul(U,sI),I=$.pow(G,J),Q=$.mul(U,I),X=$.mul($.mul(Q,sI),I),O=$.mul(Q,$.sub(X,$.ONE));return tq($,O,U),O}function e_($){let U=a4($),J=$Z($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+o_)/e7;return(O,q)=>{let D=O.pow(q,X),w=O.mul(D,G),Y=O.mul(D,I),v=O.mul(D,Q),W=O.eql(O.sqr(w),q),N=O.eql(O.sqr(Y),q);D=O.cmov(D,w,W),w=O.cmov(v,Y,N);let g=O.eql(O.sqr(w),q),V=O.cmov(D,w,g);return tq(O,V,q),V}}function $Z($){if($<p7)throw Error("sqrt is not defined for small field");let U=$-W0,J=0;while(U%sI===T0)U/=sI,J++;let G=sI,I=a4($);while(c7(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return s7;let Q=I.pow(G,U),X=(U+W0)/sI;return function(q,D){if(q.is0(D))return D;if(c7(q,D)!==1)throw Error("Cannot find square root");let w=J,Y=q.mul(q.ONE,Q),v=q.pow(D,U),W=q.pow(D,X);while(!q.eql(v,q.ONE)){if(q.is0(v))return q.ZERO;let N=1,g=q.sqr(v);while(!q.eql(g,q.ONE))if(N++,g=q.sqr(g),N===w)throw Error("Cannot find square root");let V=W0<<BigInt(w-N-1),j=q.pow(Y,V);w=N,Y=q.sqr(j),v=q.mul(v,Y),W=q.mul(W,j)}return W}}function s_($){if($%o7===p7)return s7;if($%t7===a7)return t_;if($%e7===a_)return e_($);return $Z($)}var $B=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function eq($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=$B.reduce((G,I)=>{return G[I]="function",G},U);return eI($,J),$}function UB($,U,J){if(J<T0)throw Error("invalid exponent, negatives unsupported");if(J===T0)return $.ONE;if(J===W0)return U;let G=$.ONE,I=U;while(J>T0){if(J&W0)G=$.mul(G,I);I=$.sqr(I),J>>=W0}return G}function P8($,U,J=!1){let G=Array(U.length).fill(J?$.ZERO:void 0),I=U.reduce((X,O,q)=>{if($.is0(O))return X;return G[q]=X,$.mul(X,O)},$.ONE),Q=$.inv(I);return U.reduceRight((X,O,q)=>{if($.is0(O))return X;return G[q]=$.mul(X,G[q]),$.mul(X,O)},Q),G}function c7($,U){let J=($.ORDER-W0)/sI,G=$.pow(U,J),I=$.eql(G,$.ONE),Q=$.eql(G,$.ZERO),X=$.eql(G,$.neg($.ONE));if(!I&&!Q&&!X)throw Error("invalid Legendre symbol result");return I?1:Q?0:-1}function IB($,U){if(U!==void 0)t$(U);let J=U!==void 0?U:$.toString(2).length,G=Math.ceil(J/8);return{nBitLength:J,nByteLength:G}}class UZ{ORDER;BITS;BYTES;isLE;ZERO=T0;ONE=W0;_lengths;_sqrt;_mod;constructor($,U={}){if($<=T0)throw Error("invalid field: expected ORDER > 0, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")this.sqrt=U.sqrt;if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=U.allowedLengths?.slice();if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=IB($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,this._sqrt=void 0,Object.preventExtensions(this)}create($){return j0($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw Error("invalid field element: expected bigint, got "+typeof $);return T0<=$&&$<this.ORDER}is0($){return $===T0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&W0)===W0}neg($){return j0(-$,this.ORDER)}eql($,U){return $===U}sqr($){return j0($*$,this.ORDER)}add($,U){return j0($+U,this.ORDER)}sub($,U){return j0($-U,this.ORDER)}mul($,U){return j0($*U,this.ORDER)}pow($,U){return UB(this,$,U)}div($,U){return j0($*i7(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return i7($,this.ORDER)}sqrt($){if(!this._sqrt)this._sqrt=s_(this.ORDER);return this._sqrt(this,$)}toBytes($){return this.isLE?T8($,this.BYTES):oJ($,this.BYTES)}fromBytes($,U=!1){Z$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if(!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?gI($):WI($);if(X)O=j0(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return P8(this,$)}cmov($,U,J){return J?U:$}}function a4($,U={}){return new UZ($,U)}function IZ($){if(typeof $!=="bigint")throw Error("field order must be bigint");let U=$.toString(2).length;return Math.ceil(U/8)}function sq($){let U=IZ($);return U+Math.ceil(U/2)}function JZ($,U,J=!1){Z$($);let G=$.length,I=IZ(U),Q=sq(U);if(G<16||G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?gI($):WI($),O=j0(X,U-W0)+W0;return J?T8(O,I):oJ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var aJ=BigInt(0),$J=BigInt(1);function _8($,U){let J=U.negate();return $?J:U}function JD($,U){let J=P8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function OZ($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function $D($,U){OZ($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=A8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function GZ($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=$J;let D=U*G,w=D+Math.abs(O)-1,Y=O===0,v=O<0,W=U%2!==0;return{nextN:q,offset:w,isZero:Y,isNeg:v,isNegF:W,offsetF:D}}var UD=new WeakMap,qZ=new WeakMap;function ID($){return qZ.get($)||1}function QZ($){if($!==aJ)throw Error("invalid wNAF")}class GD{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>aJ){if(U&$J)J=J.add(G);G=G.double(),U>>=$J}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=$D(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=$D($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:w,isNegF:Y,offsetF:v}=GZ(J,X,Q);if(J=O,D)I=I.add(_8(Y,U[v]));else G=G.add(_8(w,U[q]))}return QZ(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=$D($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===aJ)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=GZ(J,Q,I);if(J=X,q)continue;else{let w=U[O];G=G.add(D?w.negate():w)}}return QZ(J),G}getPrecomputes($,U,J){let G=UD.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);UD.set(U,G)}}return G}cached($,U,J){let G=ID($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=ID($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){OZ(U,this.bits),qZ.set($,U),UD.delete($)}hasCache($){return ID($)!==1}}function DZ($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>aJ||G>aJ){if(J&$J)Q=Q.add(I);if(G&$J)X=X.add(I);I=I.double(),J>>=$J,G>>=$J}return{p1:Q,p2:X}}function XZ($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return eq(U),U}else return a4($,{isLE:J})}function wZ($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>aJ))throw Error(`CURVE.${q} must be positive bigint`)}let I=XZ(U.p,J.Fp,G),Q=XZ(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function t4($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var B8=BigInt(0),tJ=BigInt(1),e4=BigInt(2);function JB($){return eI($,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...$})}function zZ($){let U=JB($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X||YI,D=O?255:448,w=O?32:56,Y=O?BigInt(9):BigInt(5),v=O?BigInt(121665):BigInt(39081),W=O?e4**BigInt(254):e4**BigInt(447),N=O?BigInt(8)*e4**BigInt(251)-tJ:BigInt(4)*e4**BigInt(445)-tJ,g=W+N+tJ,V=(M)=>j0(M,J),j=H(Y);function H(M){return T8(V(M),w)}function S(M){let K=o4(Z$(M,w,"uCoordinate"));if(O)K[31]&=127;return V(gI(K))}function B(M){return gI(I(o4(Z$(M,w,"scalar"))))}function k(M,K){let T=t(S(K),B(M));if(T===B8)throw Error("invalid private or public key received");return H(T)}function m(M){return k(M,j)}let h=m,_=k;function x(M,K,T){let f=V(M*(K-T));return K=V(K-f),T=V(T+f),{x_2:K,x_3:T}}function t(M,K){K8("u",M,B8,J),K8("scalar",K,W,g);let T=K,f=M,P=tJ,u=B8,y=M,n=tJ,U$=B8;for(let q$=BigInt(D-1);q$>=B8;q$--){let Y$=T>>q$&tJ;U$^=Y$,{x_2:P,x_3:y}=x(U$,P,y),{x_2:u,x_3:n}=x(U$,u,n),U$=Y$;let V$=P+u,W$=V(V$*V$),g$=P-u,M$=V(g$*g$),f$=W$-M$,k$=y+n,D0=y-n,w0=V(D0*V$),L0=V(k$*g$),YU=w0+L0,vU=w0-L0;y=V(YU*YU),n=V(f*V(vU*vU)),P=V(W$*M$),u=V(f$*(W$+V(v*f$)))}({x_2:P,x_3:y}=x(U$,P,y)),{x_2:u,x_3:n}=x(U$,u,n);let X$=Q(u);return V(P*X$)}let C={secretKey:w,publicKey:w,seed:w},A=(M=q(w))=>{return Z$(M,C.seed,"seed"),M},E={randomSecretKey:A};return Object.freeze({keygen:t4(A,h),getSharedSecret:_,getPublicKey:h,scalarMult:k,scalarMultBase:m,utils:E,GuBytes:j.slice(),lengths:C})}class QD{oHash;iHash;blockLen;outputLen;finished=!1;destroyed=!1;constructor($,U){if(o0($),Z$(U,void 0,"key"),this.iHash=$.create(),typeof this.iHash.update!=="function")throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let J=this.blockLen,G=new Uint8Array(J);G.set(U.length>J?$.create().update(U).digest():U);for(let I=0;I<G.length;I++)G[I]^=54;this.iHash.update(G),this.oHash=$.create();for(let I=0;I<G.length;I++)G[I]^=106;this.oHash.update(G),E0(G)}update($){return dU(this),this.iHash.update($),this}digestInto($){dU(this),Z$($,this.outputLen,"output"),this.finished=!0,this.iHash.digestInto($),this.oHash.update($),this.oHash.digestInto($),this.destroy()}digest(){let $=new Uint8Array(this.oHash.outputLen);return this.digestInto($),$}_cloneInto($){$||=Object.create(Object.getPrototypeOf(this),{});let{oHash:U,iHash:J,finished:G,destroyed:I,blockLen:Q,outputLen:X}=this;return $=$,$.finished=G,$.destroyed=I,$.blockLen=Q,$.outputLen=X,$.oHash=U._cloneInto($.oHash),$.iHash=J._cloneInto($.iHash),$}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}var eJ=($,U,J)=>new QD($,U).update(J).digest();eJ.create=($,U)=>new QD($,U);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var YZ=($,U)=>($+($>=0?U:-U)/WZ)/U;function GB($,U,J){let[[G,I],[Q,X]]=U,O=YZ(X*$,J),q=YZ(-I*$,J),D=$-O*G-q*Q,w=-O*I-q*X,Y=D<nU,v=w<nU;if(Y)D=-D;if(v)w=-w;let W=A8(Math.ceil(oq(J)/2))+sJ;if(D<nU||D>=W||w<nU||w>=W)throw Error("splitScalar (endomorphism): failed, k="+$);return{k1neg:Y,k1:D,k2neg:v,k2:w}}function OD($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function XD($,U){let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(H8(J.lowS,"lowS"),H8(J.prehash,"prehash"),J.format!==void 0)OD(J.format);return J}class vZ extends Error{constructor($=""){super($)}}var NI={Err:vZ,_tlv:{encode:($,U)=>{let{Err:J}=NI;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=j8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?j8(I.length/2|128):"";return j8($)+Q+I+U},decode($,U){let{Err:J}=NI,G=0;if($<0||$>256)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let w of D)X=X<<8|w;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=NI;if($<nU)throw new U("integer: negative integers are not allowed");let J=j8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=NI;if($[0]&128)throw new U("invalid signature integer: negative");if($[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return WI($)}},toSig($){let{Err:U,_int:J,_tlv:G}=NI,I=Z$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:w}=G.decode(2,q);if(w.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=NI,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}},nU=BigInt(0),sJ=BigInt(1),WZ=BigInt(2),s4=BigInt(3),QB=BigInt(4);function qD($,U={}){let J=wZ("weierstrass",$,U),{Fp:G,Fn:I}=J,Q=J.CURVE,{h:X,n:O}=Q;eI(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let D=VZ(G,I);function w(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function Y(A,E,M){let{x:K,y:T}=E.toAffine(),f=G.toBytes(K);if(H8(M,"isCompressed"),M){w();let P=!G.isOdd(T);return d$(gZ(P),f)}else return d$(Uint8Array.of(4),f,G.toBytes(T))}function v(A){Z$(A,void 0,"Point");let{publicKey:E,publicKeyUncompressed:M}=D,K=A.length,T=A[0],f=A.subarray(1);if(K===E&&(T===2||T===3)){let P=G.fromBytes(f);if(!G.isValid(P))throw Error("bad point: is not on curve, wrong x");let u=g(P),y;try{y=G.sqrt(u)}catch(X$){let q$=X$ instanceof Error?": "+X$.message:"";throw Error("bad point: is not on curve, sqrt error"+q$)}w();let n=G.isOdd(y);if((T&1)===1!==n)y=G.neg(y);return{x:P,y}}else if(K===M&&T===4){let P=G.BYTES,u=G.fromBytes(f.subarray(0,P)),y=G.fromBytes(f.subarray(P,P*2));if(!V(u,y))throw Error("bad point: is not on curve");return{x:u,y}}else throw Error(`bad point: got length ${K}, expected compressed=${E} or uncompressed=${M}`)}let W=U.toBytes||Y,N=U.fromBytes||v;function g(A){let E=G.sqr(A),M=G.mul(E,A);return G.add(G.add(M,G.mul(A,Q.a)),Q.b)}function V(A,E){let M=G.sqr(E),K=g(A);return G.eql(M,K)}if(!V(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let j=G.mul(G.pow(Q.a,s4),QB),H=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(j,H)))throw Error("bad curve params: a or b");function S(A,E,M=!1){if(!G.isValid(E)||M&&G.is0(E))throw Error(`bad point coordinate ${A}`);return E}function B(A){if(!(A instanceof x))throw Error("Weierstrass Point expected")}function k(A){if(!q||!q.basises)throw Error("no endo");return GB(A,q.basises,I.ORDER)}let m=aq((A,E)=>{let{X:M,Y:K,Z:T}=A;if(G.eql(T,G.ONE))return{x:M,y:K};let f=A.is0();if(E==null)E=f?G.ONE:G.inv(T);let P=G.mul(M,E),u=G.mul(K,E),y=G.mul(T,E);if(f)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:u}}),h=aq((A)=>{if(A.is0()){if(U.allowInfinityPoint&&!G.is0(A.Y))return;throw Error("bad point: ZERO")}let{x:E,y:M}=A.toAffine();if(!G.isValid(E)||!G.isValid(M))throw Error("bad point: x or y not field elements");if(!V(E,M))throw Error("bad point: equation left != right");if(!A.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0});function _(A,E,M,K,T){return M=new x(G.mul(M.X,A),M.Y,M.Z),E=_8(K,E),M=_8(T,M),E.add(M)}class x{static BASE=new x(Q.Gx,Q.Gy,G.ONE);static ZERO=new x(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(A,E,M){this.X=S("x",A),this.Y=S("y",E,!0),this.Z=S("z",M),Object.freeze(this)}static CURVE(){return Q}static fromAffine(A){let{x:E,y:M}=A||{};if(!A||!G.isValid(E)||!G.isValid(M))throw Error("invalid affine point");if(A instanceof x)throw Error("projective point not allowed");if(G.is0(E)&&G.is0(M))return x.ZERO;return new x(E,M,G.ONE)}static fromBytes(A){let E=x.fromAffine(N(Z$(A,void 0,"point")));return E.assertValidity(),E}static fromHex(A){return x.fromBytes(tI(A))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(A=8,E=!0){if(C.createCache(this,A),!E)this.multiply(s4);return this}assertValidity(){h(this)}hasEvenY(){let{y:A}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(A)}equals(A){B(A);let{X:E,Y:M,Z:K}=this,{X:T,Y:f,Z:P}=A,u=G.eql(G.mul(E,P),G.mul(T,K)),y=G.eql(G.mul(M,P),G.mul(f,K));return u&&y}negate(){return new x(this.X,G.neg(this.Y),this.Z)}double(){let{a:A,b:E}=Q,M=G.mul(E,s4),{X:K,Y:T,Z:f}=this,P=G.ZERO,u=G.ZERO,y=G.ZERO,n=G.mul(K,K),U$=G.mul(T,T),X$=G.mul(f,f),q$=G.mul(K,T);return q$=G.add(q$,q$),y=G.mul(K,f),y=G.add(y,y),P=G.mul(A,y),u=G.mul(M,X$),u=G.add(P,u),P=G.sub(U$,u),u=G.add(U$,u),u=G.mul(P,u),P=G.mul(q$,P),y=G.mul(M,y),X$=G.mul(A,X$),q$=G.sub(n,X$),q$=G.mul(A,q$),q$=G.add(q$,y),y=G.add(n,n),n=G.add(y,n),n=G.add(n,X$),n=G.mul(n,q$),u=G.add(u,n),X$=G.mul(T,f),X$=G.add(X$,X$),n=G.mul(X$,q$),P=G.sub(P,n),y=G.mul(X$,U$),y=G.add(y,y),y=G.add(y,y),new x(P,u,y)}add(A){B(A);let{X:E,Y:M,Z:K}=this,{X:T,Y:f,Z:P}=A,u=G.ZERO,y=G.ZERO,n=G.ZERO,U$=Q.a,X$=G.mul(Q.b,s4),q$=G.mul(E,T),Y$=G.mul(M,f),V$=G.mul(K,P),W$=G.add(E,M),g$=G.add(T,f);W$=G.mul(W$,g$),g$=G.add(q$,Y$),W$=G.sub(W$,g$),g$=G.add(E,K);let M$=G.add(T,P);return g$=G.mul(g$,M$),M$=G.add(q$,V$),g$=G.sub(g$,M$),M$=G.add(M,K),u=G.add(f,P),M$=G.mul(M$,u),u=G.add(Y$,V$),M$=G.sub(M$,u),n=G.mul(U$,g$),u=G.mul(X$,V$),n=G.add(u,n),u=G.sub(Y$,n),n=G.add(Y$,n),y=G.mul(u,n),Y$=G.add(q$,q$),Y$=G.add(Y$,q$),V$=G.mul(U$,V$),g$=G.mul(X$,g$),Y$=G.add(Y$,V$),V$=G.sub(q$,V$),V$=G.mul(U$,V$),g$=G.add(g$,V$),q$=G.mul(Y$,g$),y=G.add(y,q$),q$=G.mul(M$,g$),u=G.mul(W$,u),u=G.sub(u,q$),q$=G.mul(W$,Y$),n=G.mul(M$,n),n=G.add(n,q$),new x(u,y,n)}subtract(A){return this.add(A.negate())}is0(){return this.equals(x.ZERO)}multiply(A){let{endo:E}=U;if(!I.isValidNot0(A))throw Error("invalid scalar: out of range");let M,K,T=(f)=>C.cached(this,f,(P)=>JD(x,P));if(E){let{k1neg:f,k1:P,k2neg:u,k2:y}=k(A),{p:n,f:U$}=T(P),{p:X$,f:q$}=T(y);K=U$.add(q$),M=_(E.beta,n,X$,f,u)}else{let{p:f,f:P}=T(A);M=f,K=P}return JD(x,[M,K])[0]}multiplyUnsafe(A){let{endo:E}=U,M=this;if(!I.isValid(A))throw Error("invalid scalar: out of range");if(A===nU||M.is0())return x.ZERO;if(A===sJ)return M;if(C.hasCache(this))return this.multiply(A);if(E){let{k1neg:K,k1:T,k2neg:f,k2:P}=k(A),{p1:u,p2:y}=DZ(x,M,T,P);return _(E.beta,u,y,K,f)}else return C.unsafe(M,A)}toAffine(A){return m(this,A)}isTorsionFree(){let{isTorsionFree:A}=U;if(X===sJ)return!0;if(A)return A(x,this);return C.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:A}=U;if(X===sJ)return this;if(A)return A(x,this);return this.multiplyUnsafe(X)}isSmallOrder(){return this.multiplyUnsafe(X).is0()}toBytes(A=!0){return H8(A,"isCompressed"),this.assertValidity(),W(x,this,A)}toHex(A=!0){return aI(this.toBytes(A))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let t=I.BITS,C=new GD(x,U.endo?Math.ceil(t/2):t);return x.BASE.precompute(8),x}function gZ($){return Uint8Array.of($?2:3)}function VZ($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function XB($,U={}){let{Fn:J}=$,G=U.randomBytes||YI,I=Object.assign(VZ($.Fp,J),{seed:sq(J.ORDER)});function Q(W){try{let N=J.fromBytes(W);return J.isValidNot0(N)}catch(N){return!1}}function X(W,N){let{publicKey:g,publicKeyUncompressed:V}=I;try{let j=W.length;if(N===!0&&j!==g)return!1;if(N===!1&&j!==V)return!1;return!!$.fromBytes(W)}catch(j){return!1}}function O(W=G(I.seed)){return JZ(Z$(W,I.seed,"seed"),J.ORDER)}function q(W,N=!0){return $.BASE.multiply(J.fromBytes(W)).toBytes(N)}function D(W){let{secretKey:N,publicKey:g,publicKeyUncompressed:V}=I;if(!cJ(W))return;if("_lengths"in J&&J._lengths||N===g)return;let j=Z$(W,void 0,"key").length;return j===g||j===V}function w(W,N,g=!0){if(D(W)===!0)throw Error("first arg must be private key");if(D(N)===!1)throw Error("second arg must be public key");let V=J.fromBytes(W);return $.fromBytes(N).multiply(V).toBytes(g)}let Y={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},v=t4(O,q);return Object.freeze({getPublicKey:q,getSharedSecret:w,keygen:v,Point:$,utils:Y,lengths:I})}function DD($,U,J={}){o0(U),eI(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let G=J.randomBytes||YI,I=J.hmac||((M,K)=>eJ(U,M,K)),{Fp:Q,Fn:X}=$,{ORDER:O,BITS:q}=X,{keygen:D,getPublicKey:w,getSharedSecret:Y,utils:v,lengths:W}=XB($,J),N={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},g=O*WZ<Q.ORDER;function V(M){let K=O>>sJ;return M>K}function j(M,K){if(!X.isValidNot0(K))throw Error(`invalid signature ${M}: out of range 1..Point.Fn.ORDER`);return K}function H(){if(g)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function S(M,K){OD(K);let T=W.signature,f=K==="compact"?T:K==="recovered"?T+1:void 0;return Z$(M,f)}class B{r;s;recovery;constructor(M,K,T){if(this.r=j("r",M),this.s=j("s",K),T!=null){if(H(),![0,1,2,3].includes(T))throw Error("invalid recovery id");this.recovery=T}Object.freeze(this)}static fromBytes(M,K=N.format){S(M,K);let T;if(K==="der"){let{r:y,s:n}=NI.toSig(Z$(M));return new B(y,n)}if(K==="recovered")T=M[0],K="compact",M=M.subarray(1);let f=W.signature/2,P=M.subarray(0,f),u=M.subarray(f,f*2);return new B(X.fromBytes(P),X.fromBytes(u),T)}static fromHex(M,K){return this.fromBytes(tI(M),K)}assertRecovery(){let{recovery:M}=this;if(M==null)throw Error("invalid recovery id: must be present");return M}addRecoveryBit(M){return new B(this.r,this.s,M)}recoverPublicKey(M){let{r:K,s:T}=this,f=this.assertRecovery(),P=f===2||f===3?K+O:K;if(!Q.isValid(P))throw Error("invalid recovery id: sig.r+curve.n != R.x");let u=Q.toBytes(P),y=$.fromBytes(d$(gZ((f&1)===0),u)),n=X.inv(P),U$=m(Z$(M,void 0,"msgHash")),X$=X.create(-U$*n),q$=X.create(T*n),Y$=$.BASE.multiplyUnsafe(X$).add(y.multiplyUnsafe(q$));if(Y$.is0())throw Error("invalid recovery: point at infinify");return Y$.assertValidity(),Y$}hasHighS(){return V(this.s)}toBytes(M=N.format){if(OD(M),M==="der")return tI(NI.hexFromSig(this));let{r:K,s:T}=this,f=X.toBytes(K),P=X.toBytes(T);if(M==="recovered")return H(),d$(Uint8Array.of(this.assertRecovery()),f,P);return d$(f,P)}toHex(M){return aI(this.toBytes(M))}}let k=J.bits2int||function(K){if(K.length>8192)throw Error("input is too large");let T=WI(K),f=K.length*8-q;return f>0?T>>BigInt(f):T},m=J.bits2int_modN||function(K){return X.create(k(K))},h=A8(q);function _(M){return K8("num < 2^"+q,M,nU,h),X.toBytes(M)}function x(M,K){return Z$(M,void 0,"message"),K?Z$(U(M),void 0,"prehashed message"):M}function t(M,K,T){let{lowS:f,prehash:P,extraEntropy:u}=XD(T,N);M=x(M,P);let y=m(M),n=X.fromBytes(K);if(!X.isValidNot0(n))throw Error("invalid private key");let U$=[_(n),_(y)];if(u!=null&&u!==!1){let V$=u===!0?G(W.secretKey):u;U$.push(Z$(V$,void 0,"extraEntropy"))}let X$=d$(...U$),q$=y;function Y$(V$){let W$=k(V$);if(!X.isValidNot0(W$))return;let g$=X.inv(W$),M$=$.BASE.multiply(W$).toAffine(),f$=X.create(M$.x);if(f$===nU)return;let k$=X.create(g$*X.create(q$+f$*n));if(k$===nU)return;let D0=(M$.x===f$?0:2)|Number(M$.y&sJ),w0=k$;if(f&&V(k$))w0=X.neg(k$),D0^=1;return new B(f$,w0,g?void 0:D0)}return{seed:X$,k2sig:Y$}}function C(M,K,T={}){let{seed:f,k2sig:P}=t(M,K,T);return n7(U.outputLen,X.BYTES,I)(f,P).toBytes(T.format)}function A(M,K,T,f={}){let{lowS:P,prehash:u,format:y}=XD(f,N);if(T=Z$(T,void 0,"publicKey"),K=x(K,u),!cJ(M)){let n=M instanceof B?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+n)}S(M,y);try{let n=B.fromBytes(M,y),U$=$.fromBytes(T);if(P&&n.hasHighS())return!1;let{r:X$,s:q$}=n,Y$=m(K),V$=X.inv(q$),W$=X.create(Y$*V$),g$=X.create(X$*V$),M$=$.BASE.multiplyUnsafe(W$).add(U$.multiplyUnsafe(g$));if(M$.is0())return!1;return X.create(M$.x)===X$}catch(n){return!1}}function E(M,K,T={}){let{prehash:f}=XD(T,N);return K=x(K,f),B.fromBytes(M,"recovered").recoverPublicKey(K).toBytes()}return Object.freeze({keygen:D,getPublicKey:w,getSharedSecret:Y,utils:v,lengths:W,Point:$,sign:C,verify:A,recoverPublicKey:E,Signature:B,hash:U})}function NZ($,U,J){return $&U^~$&J}function ZZ($,U,J){return $&U^$&J^U&J}class $Q{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor($,U,J,G){this.blockLen=$,this.outputLen=U,this.padOffset=J,this.isLE=G,this.buffer=new Uint8Array($),this.view=c4(this.buffer)}update($){dU(this),Z$($);let{view:U,buffer:J,blockLen:G}=this,I=$.length;for(let Q=0;Q<I;){let X=Math.min(G-this.pos,I-Q);if(X===G){let O=c4($);for(;G<=I-Q;Q+=G)this.process(O,Q);continue}if(J.set($.subarray(Q,Q+X),this.pos),this.pos+=X,Q+=X,this.pos===G)this.process(U,0),this.pos=0}return this.length+=$.length,this.roundClean(),this}digestInto($){dU(this),n4($,this),this.finished=!0;let{buffer:U,view:J,blockLen:G,isLE:I}=this,{pos:Q}=this;if(U[Q++]=128,E0(this.buffer.subarray(Q)),this.padOffset>G-Q)this.process(J,0),Q=0;for(let w=Q;w<G;w++)U[w]=0;J.setBigUint64(G-8,BigInt(this.length*8),I),this.process(J,0);let X=c4($),O=this.outputLen;if(O%4)throw Error("_sha2: outputLen must be aligned to 32bit");let q=O/4,D=this.get();if(q>D.length)throw Error("_sha2: outputLen bigger than state");for(let w=0;w<q;w++)X.setUint32(4*w,D[w],I)}digest(){let{buffer:$,outputLen:U}=this;this.digestInto($);let J=$.slice(0,U);return this.destroy(),J}_cloneInto($){$||=new this.constructor,$.set(...this.get());let{blockLen:U,buffer:J,length:G,finished:I,destroyed:Q,pos:X}=this;if($.destroyed=Q,$.finished=I,$.length=G,$.pos=X,G%U)$.buffer.set(J);return $}clone(){return this._cloneInto()}}var iU=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),cU=Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),G0=Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),Q0=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var UQ=BigInt(4294967295),RZ=BigInt(32);function OB($,U=!1){if(U)return{h:Number($&UQ),l:Number($>>RZ&UQ)};return{h:Number($>>RZ&UQ)|0,l:Number($&UQ)|0}}function IQ($,U=!1){let J=$.length,G=new Uint32Array(J),I=new Uint32Array(J);for(let Q=0;Q<J;Q++){let{h:X,l:O}=OB($[Q],U);[G[Q],I[Q]]=[X,O]}return[G,I]}var wD=($,U,J)=>$>>>J,zD=($,U,J)=>$<<32-J|U>>>J,UJ=($,U,J)=>$>>>J|U<<32-J,IJ=($,U,J)=>$<<32-J|U>>>J,S8=($,U,J)=>$<<64-J|U>>>J-32,L8=($,U,J)=>$>>>J-32|U<<64-J;var MZ=($,U,J)=>$<<J|U>>>32-J,HZ=($,U,J)=>U<<J|$>>>32-J,jZ=($,U,J)=>U<<J-32|$>>>64-J,TZ=($,U,J)=>$<<J-32|U>>>64-J;function NU($,U,J,G){let I=(U>>>0)+(G>>>0);return{h:$+J+(I/4294967296|0)|0,l:I|0}}var KZ=($,U,J)=>($>>>0)+(U>>>0)+(J>>>0),AZ=($,U,J,G)=>U+J+G+($/4294967296|0)|0,PZ=($,U,J,G)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0),_Z=($,U,J,G,I)=>U+J+G+I+($/4294967296|0)|0,BZ=($,U,J,G,I)=>($>>>0)+(U>>>0)+(J>>>0)+(G>>>0)+(I>>>0),SZ=($,U,J,G,I,Q)=>U+J+G+I+Q+($/4294967296|0)|0;var DB=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ZI=new Uint32Array(64);class YD extends $Q{constructor($){super(64,$,8,!1)}get(){let{A:$,B:U,C:J,D:G,E:I,F:Q,G:X,H:O}=this;return[$,U,J,G,I,Q,X,O]}set($,U,J,G,I,Q,X,O){this.A=$|0,this.B=U|0,this.C=J|0,this.D=G|0,this.E=I|0,this.F=Q|0,this.G=X|0,this.H=O|0}process($,U){for(let w=0;w<16;w++,U+=4)ZI[w]=$.getUint32(U,!1);for(let w=16;w<64;w++){let Y=ZI[w-15],v=ZI[w-2],W=GU(Y,7)^GU(Y,18)^Y>>>3,N=GU(v,17)^GU(v,19)^v>>>10;ZI[w]=N+ZI[w-7]+W+ZI[w-16]|0}let{A:J,B:G,C:I,D:Q,E:X,F:O,G:q,H:D}=this;for(let w=0;w<64;w++){let Y=GU(X,6)^GU(X,11)^GU(X,25),v=D+Y+NZ(X,O,q)+DB[w]+ZI[w]|0,N=(GU(J,2)^GU(J,13)^GU(J,22))+ZZ(J,G,I)|0;D=q,q=O,O=X,X=Q+v|0,Q=I,I=G,G=J,J=v+N|0}J=J+this.A|0,G=G+this.B|0,I=I+this.C|0,Q=Q+this.D|0,X=X+this.E|0,O=O+this.F|0,q=q+this.G|0,D=D+this.H|0,this.set(J,G,I,Q,X,O,q,D)}roundClean(){E0(ZI)}destroy(){this.set(0,0,0,0,0,0,0,0),E0(this.buffer)}}class LZ extends YD{A=iU[0]|0;B=iU[1]|0;C=iU[2]|0;D=iU[3]|0;E=iU[4]|0;F=iU[5]|0;G=iU[6]|0;H=iU[7]|0;constructor(){super(32)}}class wB extends YD{A=cU[0]|0;B=cU[1]|0;C=cU[2]|0;D=cU[3]|0;E=cU[4]|0;F=cU[5]|0;G=cU[6]|0;H=cU[7]|0;constructor(){super(28)}}var CZ=(()=>IQ(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(($)=>BigInt($))))(),zB=(()=>CZ[0])(),YB=(()=>CZ[1])(),RI=new Uint32Array(80),MI=new Uint32Array(80);class C8 extends $Q{constructor($){super(128,$,16,!1)}get(){let{Ah:$,Al:U,Bh:J,Bl:G,Ch:I,Cl:Q,Dh:X,Dl:O,Eh:q,El:D,Fh:w,Fl:Y,Gh:v,Gl:W,Hh:N,Hl:g}=this;return[$,U,J,G,I,Q,X,O,q,D,w,Y,v,W,N,g]}set($,U,J,G,I,Q,X,O,q,D,w,Y,v,W,N,g){this.Ah=$|0,this.Al=U|0,this.Bh=J|0,this.Bl=G|0,this.Ch=I|0,this.Cl=Q|0,this.Dh=X|0,this.Dl=O|0,this.Eh=q|0,this.El=D|0,this.Fh=w|0,this.Fl=Y|0,this.Gh=v|0,this.Gl=W|0,this.Hh=N|0,this.Hl=g|0}process($,U){for(let H=0;H<16;H++,U+=4)RI[H]=$.getUint32(U),MI[H]=$.getUint32(U+=4);for(let H=16;H<80;H++){let S=RI[H-15]|0,B=MI[H-15]|0,k=UJ(S,B,1)^UJ(S,B,8)^wD(S,B,7),m=IJ(S,B,1)^IJ(S,B,8)^zD(S,B,7),h=RI[H-2]|0,_=MI[H-2]|0,x=UJ(h,_,19)^S8(h,_,61)^wD(h,_,6),t=IJ(h,_,19)^L8(h,_,61)^zD(h,_,6),C=PZ(m,t,MI[H-7],MI[H-16]),A=_Z(C,k,x,RI[H-7],RI[H-16]);RI[H]=A|0,MI[H]=C|0}let{Ah:J,Al:G,Bh:I,Bl:Q,Ch:X,Cl:O,Dh:q,Dl:D,Eh:w,El:Y,Fh:v,Fl:W,Gh:N,Gl:g,Hh:V,Hl:j}=this;for(let H=0;H<80;H++){let S=UJ(w,Y,14)^UJ(w,Y,18)^S8(w,Y,41),B=IJ(w,Y,14)^IJ(w,Y,18)^L8(w,Y,41),k=w&v^~w&N,m=Y&W^~Y&g,h=BZ(j,B,m,YB[H],MI[H]),_=SZ(h,V,S,k,zB[H],RI[H]),x=h|0,t=UJ(J,G,28)^S8(J,G,34)^S8(J,G,39),C=IJ(J,G,28)^L8(J,G,34)^L8(J,G,39),A=J&I^J&X^I&X,E=G&Q^G&O^Q&O;V=N|0,j=g|0,N=v|0,g=W|0,v=w|0,W=Y|0,{h:w,l:Y}=NU(q|0,D|0,_|0,x|0),q=X|0,D=O|0,X=I|0,O=Q|0,I=J|0,Q=G|0;let M=KZ(x,C,E);J=AZ(M,_,t,A),G=M|0}({h:J,l:G}=NU(this.Ah|0,this.Al|0,J|0,G|0)),{h:I,l:Q}=NU(this.Bh|0,this.Bl|0,I|0,Q|0),{h:X,l:O}=NU(this.Ch|0,this.Cl|0,X|0,O|0),{h:q,l:D}=NU(this.Dh|0,this.Dl|0,q|0,D|0),{h:w,l:Y}=NU(this.Eh|0,this.El|0,w|0,Y|0),{h:v,l:W}=NU(this.Fh|0,this.Fl|0,v|0,W|0),{h:N,l:g}=NU(this.Gh|0,this.Gl|0,N|0,g|0),{h:V,l:j}=NU(this.Hh|0,this.Hl|0,V|0,j|0),this.set(J,G,I,Q,X,O,q,D,w,Y,v,W,N,g,V,j)}roundClean(){E0(RI,MI)}destroy(){E0(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class vB extends C8{Ah=Q0[0]|0;Al=Q0[1]|0;Bh=Q0[2]|0;Bl=Q0[3]|0;Ch=Q0[4]|0;Cl=Q0[5]|0;Dh=Q0[6]|0;Dl=Q0[7]|0;Eh=Q0[8]|0;El=Q0[9]|0;Fh=Q0[10]|0;Fl=Q0[11]|0;Gh=Q0[12]|0;Gl=Q0[13]|0;Hh=Q0[14]|0;Hl=Q0[15]|0;constructor(){super(64)}}class EZ extends C8{Ah=G0[0]|0;Al=G0[1]|0;Bh=G0[2]|0;Bl=G0[3]|0;Ch=G0[4]|0;Cl=G0[5]|0;Dh=G0[6]|0;Dl=G0[7]|0;Eh=G0[8]|0;El=G0[9]|0;Fh=G0[10]|0;Fl=G0[11]|0;Gh=G0[12]|0;Gl=G0[13]|0;Hh=G0[14]|0;Hl=G0[15]|0;constructor(){super(48)}}var g0=Uint32Array.from([2352822216,424955298,1944164710,2312950998,502970286,855612546,1738396948,1479516111,258812777,2077511080,2011393907,79989058,1067287976,1780299464,286451373,2446758561]),V0=Uint32Array.from([573645204,4230739756,2673172387,3360449730,596883563,1867755857,2520282905,1497426621,2519219938,2827943907,3193839141,1401305490,721525244,746961066,246885852,2177182882]);class WB extends C8{Ah=g0[0]|0;Al=g0[1]|0;Bh=g0[2]|0;Bl=g0[3]|0;Ch=g0[4]|0;Cl=g0[5]|0;Dh=g0[6]|0;Dl=g0[7]|0;Eh=g0[8]|0;El=g0[9]|0;Fh=g0[10]|0;Fl=g0[11]|0;Gh=g0[12]|0;Gl=g0[13]|0;Hh=g0[14]|0;Hl=g0[15]|0;constructor(){super(28)}}class gB extends C8{Ah=V0[0]|0;Al=V0[1]|0;Bh=V0[2]|0;Bl=V0[3]|0;Ch=V0[4]|0;Cl=V0[5]|0;Dh=V0[6]|0;Dl=V0[7]|0;Eh=V0[8]|0;El=V0[9]|0;Fh=V0[10]|0;Fl=V0[11]|0;Gh=V0[12]|0;Gl=V0[13]|0;Hh=V0[14]|0;Hl=V0[15]|0;constructor(){super(32)}}var JQ=pJ(()=>new LZ,vI(1));var fZ=pJ(()=>new EZ,vI(2));/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var VB=BigInt(1),bZ=BigInt(2),NB=BigInt(3),ZB=BigInt(5),Ln=BigInt(8),kZ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed");function RB($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=kZ,O=$*$%Q*$%Q,q=a0(O,bZ,Q)*O%Q,D=a0(q,VB,Q)*$%Q,w=a0(D,ZB,Q)*D%Q,Y=a0(w,U,Q)*w%Q,v=a0(Y,J,Q)*Y%Q,W=a0(v,G,Q)*v%Q,N=a0(W,I,Q)*W%Q,g=a0(N,I,Q)*W%Q,V=a0(g,U,Q)*w%Q;return{pow_p_5_8:a0(V,bZ,Q)*$%Q,b2:O}}function MB($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var uZ=(()=>{let $=kZ;return zZ({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=RB(U);return j0(a0(J,NB,$)*G,$)},adjustScalarBytes:MB})})();/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var HB=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))(),jB=(()=>({p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")}))();var TB=qD(HB),vD=DD(TB,JQ);var KB=qD(jB),FZ=DD(KB,fZ);function xZ($,U,J){if(o0($),J===void 0)J=new Uint8Array($.outputLen);return eJ($,J,U)}var WD=Uint8Array.of(0),mZ=Uint8Array.of();function yZ($,U,J,G=32){o0($),t$(G,"length");let I=$.outputLen;if(G>255*I)throw Error("Length must be <= 255*HashLen");let Q=Math.ceil(G/I);if(J===void 0)J=mZ;else Z$(J,void 0,"info");let X=new Uint8Array(Q*I),O=eJ.create($,U),q=O._cloneInto(),D=new Uint8Array(O.outputLen);for(let w=0;w<Q;w++)WD[0]=w+1,q.update(w===0?mZ:D).update(J).update(WD).digestInto(D),X.set(D,I*w),O._cloneInto(q);return O.destroy(),q.destroy(),E0(D,WD),X.slice(0,G)}var AB=BigInt(0),E8=BigInt(1),PB=BigInt(2),_B=BigInt(7),BB=BigInt(256),SB=BigInt(113),lZ=[],dZ=[],nZ=[];for(let $=0,U=E8,J=1,G=0;$<24;$++){[J,G]=[G,(2*J+3*G)%5],lZ.push(2*(5*G+J)),dZ.push(($+1)*($+2)/2%64);let I=AB;for(let Q=0;Q<7;Q++)if(U=(U<<E8^(U>>_B)*SB)%BB,U&PB)I^=E8<<(E8<<BigInt(Q))-E8;nZ.push(I)}var iZ=IQ(nZ,!0),LB=iZ[0],CB=iZ[1],rZ=($,U,J)=>J>32?jZ($,U,J):MZ($,U,J),hZ=($,U,J)=>J>32?TZ($,U,J):HZ($,U,J);function EB($,U=24){let J=new Uint32Array(10);for(let G=24-U;G<24;G++){for(let X=0;X<10;X++)J[X]=$[X]^$[X+10]^$[X+20]^$[X+30]^$[X+40];for(let X=0;X<10;X+=2){let O=(X+8)%10,q=(X+2)%10,D=J[q],w=J[q+1],Y=rZ(D,w,1)^J[O],v=hZ(D,w,1)^J[O+1];for(let W=0;W<50;W+=10)$[X+W]^=Y,$[X+W+1]^=v}let I=$[2],Q=$[3];for(let X=0;X<24;X++){let O=dZ[X],q=rZ(I,Q,O),D=hZ(I,Q,O),w=lZ[X];I=$[w],Q=$[w+1],$[w]=q,$[w+1]=D}for(let X=0;X<50;X+=10){for(let O=0;O<10;O++)J[O]=$[X+O];for(let O=0;O<10;O++)$[X+O]^=~J[(O+2)%10]&J[(O+4)%10]}$[0]^=LB[G],$[1]^=CB[G]}E0(J)}class GQ{state;pos=0;posOut=0;finished=!1;state32;destroyed=!1;blockLen;suffix;outputLen;enableXOF=!1;rounds;constructor($,U,J,G=!1,I=24){if(this.blockLen=$,this.suffix=U,this.outputLen=J,this.enableXOF=G,this.rounds=I,t$(J,"outputLen"),!(0<$&&$<200))throw Error("only keccak-f1600 function is supported");this.state=new Uint8Array(200),this.state32=i4(this.state)}clone(){return this._cloneInto()}keccak(){iq(this.state32),EB(this.state32,this.rounds),iq(this.state32),this.posOut=0,this.pos=0}update($){dU(this),Z$($);let{blockLen:U,state:J}=this,G=$.length;for(let I=0;I<G;){let Q=Math.min(U-this.pos,G-I);for(let X=0;X<Q;X++)J[this.pos++]^=$[I++];if(this.pos===U)this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;let{state:$,suffix:U,pos:J,blockLen:G}=this;if($[J]^=U,(U&128)!==0&&J===G-1)this.keccak();$[G-1]^=128,this.keccak()}writeInto($){dU(this,!1),Z$($),this.finish();let U=this.state,{blockLen:J}=this;for(let G=0,I=$.length;G<I;){if(this.posOut>=J)this.keccak();let Q=Math.min(J-this.posOut,I-G);$.set(U.subarray(this.posOut,this.posOut+Q),G),this.posOut+=Q,G+=Q}return $}xofInto($){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto($)}xof($){return t$($),this.xofInto(new Uint8Array($))}digestInto($){if(n4($,this),this.finished)throw Error("digest() was already called");return this.writeInto($),this.destroy(),$}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,E0(this.state)}_cloneInto($){let{blockLen:U,suffix:J,outputLen:G,rounds:I,enableXOF:Q}=this;return $||=new GQ(U,J,G,Q,I),$.state32.set(this.state32),$.pos=this.pos,$.posOut=this.posOut,$.finished=this.finished,$.rounds=I,$.suffix=J,$.outputLen=G,$.enableXOF=Q,$.destroyed=this.destroyed,$}}var cZ=($,U,J,G={})=>pJ(()=>new GQ(U,$,J),G);var JJ=cZ(6,136,32,vI(8));var pZ=cZ(6,72,64,vI(10));var oZ=($,U,J,G={})=>pJ((I={})=>new GQ(U,$,I.dkLen===void 0?J:I.dkLen,!0),G),aZ=oZ(31,168,16,vI(11)),ZU=oZ(31,136,32,vI(12));function gD($){if(!Number.isSafeInteger($)||$<0||$>4294967295)throw Error("wrong u32 integer:"+$);return $}function eZ($){return gD($),($&$-1)===0&&$!==0}function VD($,U){gD($);let J=0;for(let G=0;G<U;G++,$>>>=1)J=J<<1|$&1;return J}function sZ($){return gD($),31-Math.clz32($)}function tZ($){let U=$.length;if(U<2||!eZ(U))throw Error("n must be a power of 2 and greater than 1. Got "+U);let J=sZ(U);for(let G=0;G<U;G++){let I=VD(G,J);if(G<I){let Q=$[G];$[G]=$[I],$[I]=Q}}return $}var ND=($,U)=>{let{N:J,roots:G,dit:I,invertButterflies:Q=!1,skipStages:X=0,brp:O=!0}=U,q=sZ(J);if(!eZ(J))throw Error("FFT: Polynomial size should be power of two");let D=I!==Q;return(w)=>{if(w.length!==J)throw Error("FFT: wrong Polynomial length");if(I&&O)tZ(w);for(let Y=0,v=1;Y<q-X;Y++){let W=I?Y+1+X:q-Y,N=1<<W,g=N>>1,V=J>>W;for(let j=0;j<J;j+=N)for(let H=0,S=v++;H<g;H++){let B=Q?I?J-S:S:H*V,k=j+H,m=j+H+g,h=G[B],_=w[m],x=w[k];if(D){let t=$.mul(_,h);w[k]=$.add(x,t),w[m]=$.sub(x,t)}else if(Q)w[k]=$.add(_,x),w[m]=$.mul($.sub(_,x),h);else w[k]=$.add(x,_),w[m]=$.mul($.sub(x,_),h)}}if(!I&&O)tZ(w);return w}};/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var RU=YI;function QQ($,U){if($.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function $5($){return Uint8Array.from($)}function GJ($,...U){let J=(I)=>typeof I==="number"?I:I.bytesLen,G=U.reduce((I,Q)=>I+J(Q),0);return{bytesLen:G,encode:(I)=>{let Q=new Uint8Array(G);for(let X=0,O=0;X<U.length;X++){let q=U[X],D=J(q),w=typeof q==="number"?I[X]:q.encode(I[X]);if(Z$(w,D,$),Q.set(w,O),typeof q!=="number")w.fill(0);O+=D}return Q},decode:(I)=>{Z$(I,G,$);let Q=[];for(let X of U){let O=J(X),q=I.subarray(0,O);Q.push(typeof X==="number"?q:X.decode(q)),I=I.subarray(O)}return Q}}}function XQ($,U){let J=U*$.bytesLen;return{bytesLen:J,encode:(G)=>{if(G.length!==U)throw Error(`vecCoder.encode: wrong length=${G.length}. Expected: ${U}`);let I=new Uint8Array(J);for(let Q=0,X=0;Q<G.length;Q++){let O=$.encode(G[Q]);I.set(O,X),O.fill(0),X+=O.length}return I},decode:(G)=>{Z$(G,J);let I=[];for(let Q=0;Q<G.length;Q+=$.bytesLen)I.push($.decode(G.subarray(Q,Q+$.bytesLen)));return I}}}function p$(...$){for(let U of $)if(Array.isArray(U))for(let J of U)J.fill(0);else U.fill(0)}function ZD($){return(1<<$)-1}var nn=Uint8Array.of();/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var U5=($)=>{let{newPoly:U,N:J,Q:G,F:I,ROOT_OF_UNITY:Q,brvBits:X,isKyber:O}=$,q=(H,S=G)=>{let B=H%S|0;return(B>=0?B|0:S+B|0)|0},D=(H,S=G)=>{let B=q(H,S)|0;return(B>S>>1?B-S|0:B)|0};function w(){let H=U(J);for(let S=0;S<J;S++){let B=VD(S,X),k=BigInt(Q)**BigInt(B)%BigInt(G);H[S]=Number(k)|0}return H}let Y=w(),v={add:(H,S)=>q((H|0)+(S|0))|0,sub:(H,S)=>q((H|0)-(S|0))|0,mul:(H,S)=>q((H|0)*(S|0))|0,inv:(H)=>{throw Error("not implemented")}},W={N:J,roots:Y,invertButterflies:!0,skipStages:O?1:0,brp:!1},N=ND(v,{dit:!1,...W}),g=ND(v,{dit:!0,...W});return{mod:q,smod:D,nttZetas:Y,NTT:{encode:(H)=>{return N(H)},decode:(H)=>{g(H);for(let S=0;S<H.length;S++)H[S]=q(I*H[S]);return H}},bitsCoder:(H,S)=>{let B=ZD(H),k=H*(J/8);return{bytesLen:k,encode:(m)=>{let h=new Uint8Array(k);for(let _=0,x=0,t=0,C=0;_<m.length;_++){x|=(S.encode(m[_])&B)<<t,t+=H;for(;t>=8;t-=8,x>>=8)h[C++]=x&ZD(t)}return h},decode:(m)=>{let h=U(J);for(let _=0,x=0,t=0,C=0;_<m.length;_++){x|=m[_]<<t,t+=8;for(;t>=H;t-=H,x>>=H)h[C++]=S.decode(x&B)}return h}}}}},fB=($)=>(U,J)=>{if(!J)J=$.blockLen;let G=new Uint8Array(U.length+2);G.set(U);let I=U.length,Q=new Uint8Array(J),X=$.create({}),O=0,q=0;return{stats:()=>({calls:O,xofs:q}),get:(D,w)=>{return G[I+0]=D,G[I+1]=w,X.destroy(),X=$.create({}).update(G),O++,()=>{return q++,X.xofInto(Q)}},clean:()=>{X.destroy(),p$(Q,G)}}},I5=fB(aZ);/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */var N0=256,pU=3329,bB=3303,kB=17,{mod:k8,nttZetas:uB,NTT:QJ,bitsCoder:FB}=U5({N:N0,Q:pU,F:bB,ROOT_OF_UNITY:kB,newPoly:($)=>new Uint16Array($),brvBits:7,isKyber:!0}),RD={512:{N:N0,Q:pU,K:2,ETA1:3,ETA2:2,du:10,dv:4,RBGstrength:128},768:{N:N0,Q:pU,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192},1024:{N:N0,Q:pU,K:4,ETA1:2,ETA2:2,du:11,dv:5,RBGstrength:256}},mB=($)=>{if($>=12)return{encode:(J)=>J,decode:(J)=>J};let U=2**($-1);return{encode:(J)=>((J<<$)+pU/2)/pU,decode:(J)=>J*pU+U>>>$}},f8=($)=>FB($,mB($));function XJ($,U){for(let J=0;J<N0;J++)$[J]=k8($[J]+U[J])}function xB($,U){for(let J=0;J<N0;J++)$[J]=k8($[J]-U[J])}function yB($,U,J,G,I){let Q=k8(U*G*I+$*J),X=k8($*G+U*J);return{c0:Q,c1:X}}function OQ($,U){for(let J=0;J<N0/2;J++){let G=uB[64+(J>>1)];if(J&1)G=-G;let{c0:I,c1:Q}=yB($[2*J+0],$[2*J+1],U[2*J+0],U[2*J+1],G);$[2*J+0]=I,$[2*J+1]=Q}return $}function J5($){let U=new Uint16Array(N0);for(let J=0;J<N0;){let G=$();if(G.length%3)throw Error("SampleNTT: unaligned block");for(let I=0;J<N0&&I+3<=G.length;I+=3){let Q=(G[I+0]>>0|G[I+1]<<8)&4095,X=(G[I+1]>>4|G[I+2]<<4)&4095;if(Q<pU)U[J++]=Q;if(J<N0&&X<pU)U[J++]=X}}return U}function b8($,U,J,G){let I=$(G*N0/4,U,J),Q=new Uint16Array(N0),X=i4(I),O=0;for(let q=0,D=0,w=0,Y=0;q<X.length;q++){let v=X[q];for(let W=0;W<32;W++)if(w+=v&1,v>>=1,O+=1,O===G)Y=w,w=0;else if(O===2*G)Q[D++]=k8(Y-w),w=0,O=0}if(O)throw Error(`sampleCBD: leftover bits: ${O}`);return Q}var rB=($)=>{let{K:U,PRF:J,XOF:G,HASH512:I,ETA1:Q,ETA2:X,du:O,dv:q}=$,D=f8(1),w=f8(q),Y=f8(O),v=GJ("publicKey",XQ(f8(12),U),32),W=XQ(f8(12),U),N=GJ("ciphertext",XQ(Y,U),w),g=GJ("seed",32,32);return{secretCoder:W,lengths:{secretKey:W.bytesLen,publicKey:v.bytesLen,cipherText:N.bytesLen},keygen:(V)=>{Z$(V,32,"seed");let j=new Uint8Array(33);j.set(V),j[32]=U;let H=I(j),[S,B]=g.decode(H),k=[],m=[];for(let x=0;x<U;x++)k.push(QJ.encode(b8(J,B,x,Q)));let h=G(S);for(let x=0;x<U;x++){let t=QJ.encode(b8(J,B,U+x,Q));for(let C=0;C<U;C++){let A=J5(h.get(C,x));XJ(t,OQ(A,k[C]))}m.push(t)}h.clean();let _={publicKey:v.encode([m,S]),secretKey:W.encode(k)};return p$(S,B,k,m,j,H),_},encrypt:(V,j,H)=>{let[S,B]=v.decode(V),k=[];for(let C=0;C<U;C++)k.push(QJ.encode(b8(J,H,C,Q)));let m=G(B),h=new Uint16Array(N0),_=[];for(let C=0;C<U;C++){let A=b8(J,H,U+C,X),E=new Uint16Array(N0);for(let M=0;M<U;M++){let K=J5(m.get(C,M));XJ(E,OQ(K,k[M]))}XJ(A,QJ.decode(E)),_.push(A),XJ(h,OQ(S[C],k[C])),p$(E)}m.clean();let x=b8(J,H,2*U,X);XJ(x,QJ.decode(h));let t=D.decode(j);return XJ(t,x),p$(S,k,h,x),N.encode([_,t])},decrypt:(V,j)=>{let[H,S]=N.decode(V),B=W.decode(j),k=new Uint16Array(N0);for(let m=0;m<U;m++)XJ(k,OQ(B[m],QJ.encode(H[m])));return xB(S,QJ.decode(k)),p$(k,B,H),D.encode(S)}}};function MD($){let U=rB($),{HASH256:J,HASH512:G,KDF:I}=$,{secretCoder:Q,lengths:X}=U,O=GJ("secretKey",X.secretKey,X.publicKey,32,32),q=32,D=64;return{info:{type:"ml-kem"},lengths:{...X,seed:64,msg:32,msgRand:32,secretKey:O.bytesLen},keygen:(w=RU(64))=>{Z$(w,64,"seed");let{publicKey:Y,secretKey:v}=U.keygen(w.subarray(0,32)),W=J(Y),N=O.encode([v,Y,W,w.subarray(32)]);return p$(v,W),{publicKey:Y,secretKey:N}},getPublicKey:(w)=>{let[Y,v,W,N]=O.decode(w);return Uint8Array.from(v)},encapsulate:(w,Y=RU(32))=>{Z$(w,X.publicKey,"publicKey"),Z$(Y,32,"message");let v=w.subarray(0,384*$.K),W=Q.encode(Q.decode($5(v)));if(!QQ(W,v))throw p$(W),Error("ML-KEM.encapsulate: wrong publicKey modulus");p$(W);let N=G.create().update(Y).update(J(w)).digest(),g=U.encrypt(w,Y,N.subarray(32,64));return p$(N.subarray(32)),{cipherText:g,sharedSecret:N.subarray(0,32)}},decapsulate:(w,Y)=>{Z$(Y,O.bytesLen,"secretKey"),Z$(w,X.cipherText,"cipherText");let v=O.bytesLen-96,W=v+32,N=J(Y.subarray(v/2,W));if(!QQ(N,Y.subarray(W,W+32)))throw Error("invalid secretKey: hash check failed");let[g,V,j,H]=O.decode(Y),S=U.decrypt(w,g),B=G.create().update(S).update(j).digest(),k=B.subarray(0,32),m=U.encrypt(V,S,B.subarray(32,64)),h=QQ(w,m),_=I.create({dkLen:32}).update(H).update(w).digest();return p$(S,m,!h?k:_),h?k:_}}}function hB($,U,J){return ZU.create({dkLen:$}).update(U).update(new Uint8Array([J])).digest()}var HD={HASH256:JJ,HASH512:pZ,KDF:ZU,XOF:I5,PRF:hB},Ji=MD({...HD,...RD[512]}),u8=MD({...HD,...RD[768]}),G5=MD({...HD,...RD[1024]});/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function lB($,U=!1){let{lengths:J,keygen:G}=$;if(U){let Q=$.Point.Fn;if(!Q)throw Error("No Point.Fn");G=(X=RU(J.seed))=>{Z$(X,J.seed,"seed");let O=Q.isLE?gI(X):WI(X),q=Q.toBytes(Q.create(O));return{secretKey:q,publicKey:$.getPublicKey(q)}}}return{lengths:{secretKey:J.secretKey,publicKey:J.publicKey,seed:J.seed},keygen:G,getPublicKey:(I)=>$.getPublicKey(I)}}function jD($,U=!1){let J=lB($,U);if(!$.getSharedSecret)throw Error("wrong curve");return{lengths:{...J.lengths,msg:J.lengths.seed,cipherText:J.lengths.publicKey},keygen:J.keygen,getPublicKey:J.getPublicKey,encapsulate(G,I=RU($.lengths.seed)){let Q=this.keygen(I).secretKey,X=this.decapsulate(G,Q),O=$.getPublicKey(Q);return p$(Q),{sharedSecret:X,cipherText:O}},decapsulate(G,I){let Q=$.getSharedSecret(I,G);return $.lengths.publicKeyHasPrefix?Q.subarray(1):Q}}}function F8($,U){return GJ(U,...$.map((J)=>{if(typeof J.lengths[U]!=="number")throw Error("wrong length: "+U);return J.lengths[U]}))}function TD($){return(U,J)=>$(U,{dkLen:J})}function dB($,U,...J){let G=F8(J,"seed"),I=F8(J,"publicKey");if($===void 0)$=G.bytesLen;t$($);function Q(X){Z$(X,$);let O=G.decode(U(X,G.bytesLen)),q=J.map((Y,v)=>Y.keygen(O[v])),D=q.map((Y)=>Y.secretKey),w=q.map((Y)=>Y.publicKey);return{secretKey:D,publicKey:w}}return{info:{lengths:{seed:$,publicKey:I.bytesLen,secretKey:$}},getPublicKey(X){return this.keygen(X).publicKey},keygen(X=RU($)){let{publicKey:O,secretKey:q}=Q(X),D=I.encode(O);return p$(O),p$(q),{secretKey:X,publicKey:D}},expandDecapsulationKey:Q,realSeedLen:$}}function qQ($,U,J,G,...I){let Q=dB($,J,...I),X=F8(I,"cipherText"),O=F8(I,"publicKey"),q=F8(I,"msg");if(U===void 0)U=q.bytesLen;return t$(U),{lengths:{...Q.info.lengths,msg:U,msgRand:q.bytesLen,cipherText:X.bytesLen},getPublicKey:Q.getPublicKey,keygen:Q.keygen,encapsulate(D,w=RU(q.bytesLen)){let Y=O.decode(D),v=q.decode(w),W=I.map((j,H)=>j.encapsulate(Y[H],v[H])),N=W.map((j)=>j.sharedSecret),g=W.map((j)=>j.cipherText),V={sharedSecret:G(Y,g,N),cipherText:X.encode(g)};return p$(N,g),V},decapsulate(D,w){let Y=X.decode(D),{publicKey:v,secretKey:W}=Q.expandDecapsulationKey(w),N=I.map((g,V)=>g.decapsulate(Y[V],W[V]));return G(v,Y,N)}}}function Q5($,U,J,G,I){return o0(G),o0(I),qQ(32,32,TD(G),(Q,X,O)=>I(d$(O[0],O[1],X[1],Q[1],VI($))),U,J)}var Wi=Q5("QSF-KEM(ML-KEM-768,P-256)-XOF(SHAKE256)-KDF(SHA3-256)",u8,jD(vD,!0),ZU,JJ),gi=Q5("QSF-KEM(ML-KEM-1024,P-384)-XOF(SHAKE256)-KDF(SHA3-256)",G5,jD(FZ,!0),ZU,JJ);function nB($,U,J,G,I){return o0(G),o0(I),qQ(32,32,TD(G),(Q,X,O)=>{let q=d$(O[0],O[1],X[0],Q[0],X[1],Q[1],VI($)),D=32,w=d$(VI("hybrid_prk"),q),Y=xZ(I,w),v=d$(oJ(32,2),VI("shared_secret"),VI("")),W=yZ(I,Y,v,32);return p$(Y,v,w,q),W},U,J)}var X5=jD(uZ),Vi=nB("KitchenSink-KEM(ML-KEM-768,X25519)-XOF(SHAKE256)-KDF(HKDF-SHA-256)",u8,X5,ZU,JQ),iB=(()=>qQ(32,32,TD(ZU),($,U,J)=>JJ(d$(J[0],J[1],U[1],$[1],VI("\\.//^\\"))),u8,X5))();function cB($,U,J,G){let I=$.Point.Fn;if(!I)throw Error("no Point.Fn");function Q(X){let O;for(let w=0,Y=U;;w=Y,Y+=U){if(Y>X.length)throw Error("rejection sampling failed");if(O=I.fromBytes(X.subarray(w,Y),!0),I.isValidNot0(O))break}let q=I.toBytes(I.create(O)),D=$.getPublicKey(q,!1);return{secretKey:q,publicKey:D}}return{lengths:{secretKey:U,publicKey:J,seed:G,msg:G,cipherText:J},keygen(X=RU(G)){return Z$(X,G,"seed"),Q(X)},getPublicKey(X){return $.getPublicKey(X,!1)},encapsulate(X,O=RU(G)){Z$(O,G,"rand");let{secretKey:q}=Q(O),D=this.decapsulate(X,q),w=$.getPublicKey(q,!1);return p$(q),{sharedSecret:D,cipherText:w}},decapsulate(X,O){return $.getSharedSecret(O,X).subarray(1)}}}function pB($,U,J,G){let{secretKey:I,publicKeyUncompressed:Q}=J.lengths;if(!I||!Q)throw Error("wrong curve");let X=cB(J,I,Q,G),O=64,q=O+G;return qQ(32,32,(D)=>{Z$(D,32);let w=ZU(D,{dkLen:q}),Y=w.subarray(0,O),v=w.subarray(O,q);return d$(Y,v)},(D,w,Y)=>JJ(d$(Y[0],Y[1],w[1],D[1],VI($))),U,X)}var oB=(()=>pB("MLKEM768-P256",u8,vD,128))();var DQ=iB,O5=oB;/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var S$=($,U,J)=>$0($,U,J),AD=h$,$G=f4,X0=(...$)=>Pq(...$),UG=($)=>Y8($),IG=Tq,JG=($)=>xU($),zQ=BigInt(0),KD=BigInt(1);function oU($,U=""){if(typeof $!=="boolean"){let J=U&&`"${U}" `;throw TypeError(J+"expected boolean, got type="+typeof $)}return $}function YQ($){if(typeof $==="bigint"){if(!wQ($))throw RangeError("positive bigint expected, got "+$)}else AD($);return $}function MU($,U=""){if(typeof $!=="number"){let J=U&&`"${U}" `;throw TypeError(J+"expected number, got type="+typeof $)}if(!Number.isSafeInteger($)){let J=U&&`"${U}" `;throw RangeError(J+"expected safe integer, got "+$)}}function m8($){let U=YQ($).toString(16);return U.length&1?"0"+U:U}function q5($){if(typeof $!=="string")throw TypeError("hex string expected, got "+typeof $);return $===""?zQ:BigInt("0x"+$)}function OJ($){return q5(f4($))}function QU($){return q5(f4(HI($0($)).reverse()))}function vQ($,U){if(h$(U),U===0)throw RangeError("zero length");$=YQ($);let J=$.toString(16);if(J.length>U*2)throw RangeError("number too large");return Y8(J.padStart(U*2,"0"))}function x8($,U){return vQ($,U).reverse()}function D5($,U){if($=S$($),U=S$(U),$.length!==U.length)return!1;let J=0;for(let G=0;G<$.length;G++)J|=$[G]^U[G];return J===0}function HI($){return Uint8Array.from(S$($))}function WQ($){if(typeof $!=="string")throw TypeError("ascii string expected, got "+typeof $);return Uint8Array.from($,(U,J)=>{let G=U.charCodeAt(0);if(U.length!==1||G>127)throw RangeError(`string contains non-ASCII character "${$[J]}" with code ${G} at position ${J}`);return G})}var wQ=($)=>typeof $==="bigint"&&zQ<=$;function aB($,U,J){return wQ($)&&wQ(U)&&wQ(J)&&U<=$&&$<J}function aU($,U,J,G){if(!aB(U,J,G))throw RangeError("expected valid "+$+": "+J+" <= n < "+G+", got "+U)}function GG($){if($<zQ)throw Error("expected non-negative bigint, got "+$);let U;for(U=0;$>zQ;$>>=KD,U+=1);return U}var y8=($)=>(KD<<BigInt($))-KD;function w5($,U,J){if(h$($,"hashLen"),h$(U,"qByteLen"),typeof J!=="function")throw TypeError("hmacFn must be a function");let G=(V)=>new Uint8Array(V),I=Uint8Array.of(),Q=Uint8Array.of(0),X=Uint8Array.of(1),O=1000,q=G($),D=G($),w=0,Y=()=>{q.fill(1),D.fill(0),w=0},v=(...V)=>J(D,X0(q,...V)),W=(V=I)=>{if(D=v(Q,V),q=v(),V.length===0)return;D=v(X,V),q=v()},N=()=>{if(w++>=O)throw Error("drbg: tried max amount of iterations");let V=0,j=[];while(V<U){q=v();let H=q.slice();j.push(H),V+=q.length}return X0(...j)};return(V,j)=>{Y(),W(V);let H=void 0;while((H=j(N()))===void 0)W();return Y(),H}}function t0($,U={},J={}){if(Object.prototype.toString.call($)!=="[object Object]")throw TypeError("expected valid options object");function G(Q,X,O){if(!O&&X!=="function"&&!Object.hasOwn($,Q))throw TypeError(`param "${Q}" is invalid: expected own property`);let q=$[Q];if(O&&q===void 0)return;let D=typeof q;if(D!==X||q===null)throw TypeError(`param "${Q}" is invalid: expected ${X}, got ${D}`)}let I=(Q,X)=>Object.entries(Q).forEach(([O,q])=>G(O,q,X));I(U,!1),I(J,!0)}var PD=()=>{throw Error("not implemented")};/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var O0=BigInt(0),x$=BigInt(1),qJ=BigInt(2),W5=BigInt(3),g5=BigInt(4),V5=BigInt(5),tB=BigInt(7),N5=BigInt(8),eB=BigInt(9),Z5=BigInt(16);function u$($,U){if(U<=O0)throw Error("mod: expected positive modulus, got "+U);let J=$%U;return J>=O0?J:U+J}function e0($,U,J){if(U<O0)throw Error("pow2: expected non-negative exponent, got "+U);let G=$;while(U-- >O0)G*=G,G%=J;return G}function z5($,U){if($===O0)throw Error("invert: expected non-zero number");if(U<=O0)throw Error("invert: expected positive modulus, got "+U);let J=u$($,U),G=U,I=O0,Q=x$,X=x$,O=O0;while(J!==O0){let D=G/J,w=G-J*D,Y=I-X*D,v=Q-O*D;G=J,J=w,I=X,Q=O,X=Y,O=v}if(G!==x$)throw Error("invert: does not exist");return u$(I,U)}function _D($,U,J){let G=$;if(!G.eql(G.sqr(U),J))throw Error("Cannot find square root")}function R5($,U){let J=$,G=(J.ORDER+x$)/g5,I=J.pow(U,G);return _D(J,I,U),I}function sB($,U){let J=$,G=(J.ORDER-V5)/N5,I=J.mul(U,qJ),Q=J.pow(I,G),X=J.mul(U,Q),O=J.mul(J.mul(X,qJ),Q),q=J.mul(X,J.sub(O,J.ONE));return _D(J,q,U),q}function $S($){let U=gQ($),J=M5($),G=J(U,U.neg(U.ONE)),I=J(U,G),Q=J(U,U.neg(G)),X=($+tB)/Z5;return(O,q)=>{let D=O,w=D.pow(q,X),Y=D.mul(w,G),v=D.mul(w,I),W=D.mul(w,Q),N=D.eql(D.sqr(Y),q),g=D.eql(D.sqr(v),q);w=D.cmov(w,Y,N),Y=D.cmov(W,v,g);let V=D.eql(D.sqr(Y),q),j=D.cmov(w,Y,V);return _D(D,j,q),j}}function M5($){if($<W5)throw Error("sqrt is not defined for small field");let U=$-x$,J=0;while(U%qJ===O0)U/=qJ,J++;let G=qJ,I=gQ($);while(Y5(I,G)===1)if(G++>1000)throw Error("Cannot find square root: probably non-prime P");if(J===1)return R5;let Q=I.pow(G,U),X=(U+x$)/qJ;return function(q,D){let w=q;if(w.is0(D))return D;if(Y5(w,D)!==1)throw Error("Cannot find square root");let Y=J,v=w.mul(w.ONE,Q),W=w.pow(D,U),N=w.pow(D,X);while(!w.eql(W,w.ONE)){if(w.is0(W))return w.ZERO;let g=1,V=w.sqr(W);while(!w.eql(V,w.ONE))if(g++,V=w.sqr(V),g===Y)throw Error("Cannot find square root");let j=x$<<BigInt(Y-g-1),H=w.pow(v,j);Y=g,v=w.sqr(H),W=w.mul(W,v),N=w.mul(N,H)}return N}}function US($){if($%g5===W5)return R5;if($%N5===V5)return sB;if($%Z5===eB)return $S($);return M5($)}var tU=($,U)=>(u$($,U)&x$)===x$,IS=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function BD($){let U={ORDER:"bigint",BYTES:"number",BITS:"number"},J=IS.reduce((G,I)=>{return G[I]="function",G},U);if(t0($,J),MU($.BYTES,"BYTES"),MU($.BITS,"BITS"),$.BYTES<1||$.BITS<1)throw Error("invalid field: expected BYTES/BITS > 0");if($.ORDER<=x$)throw Error("invalid field: expected ORDER > 1, got "+$.ORDER);return $}function JS($,U,J){let G=$;if(J<O0)throw Error("invalid exponent, negatives unsupported");if(J===O0)return G.ONE;if(J===x$)return U;let I=G.ONE,Q=U;while(J>O0){if(J&x$)I=G.mul(I,Q);Q=G.sqr(Q),J>>=x$}return I}function r8($,U,J=!1){let G=$,I=Array(U.length).fill(J?G.ZERO:void 0),Q=U.reduce((O,q,D)=>{if(G.is0(q))return O;return I[D]=O,G.mul(O,q)},G.ONE),X=G.inv(Q);return U.reduceRight((O,q,D)=>{if(G.is0(q))return O;return I[D]=G.mul(O,I[D]),G.mul(O,q)},X),I}function Y5($,U){let J=$,G=(J.ORDER-x$)/qJ,I=J.pow(U,G),Q=J.eql(I,J.ONE),X=J.eql(I,J.ZERO),O=J.eql(I,J.neg(J.ONE));if(!Q&&!X&&!O)throw Error("invalid Legendre symbol result");return Q?1:X?0:-1}function GS($,U){if(U!==void 0)AD(U);if($<=O0)throw Error("invalid n length: expected positive n, got "+$);if(U!==void 0&&U<1)throw Error("invalid n length: expected positive bit length, got "+U);let J=GG($);if(U!==void 0&&U<J)throw Error(`invalid n length: expected bit length (${J}) >= n.length (${U})`);let G=U!==void 0?U:J,I=Math.ceil(G/8);return{nBitLength:G,nByteLength:I}}var v5=new WeakMap;class SD{ORDER;BITS;BYTES;isLE;ZERO=O0;ONE=x$;_lengths;_mod;constructor($,U={}){if($<=x$)throw Error("invalid field: expected ORDER > 1, got "+$);let J=void 0;if(this.isLE=!1,U!=null&&typeof U==="object"){if(typeof U.BITS==="number")J=U.BITS;if(typeof U.sqrt==="function")Object.defineProperty(this,"sqrt",{value:U.sqrt,enumerable:!0});if(typeof U.isLE==="boolean")this.isLE=U.isLE;if(U.allowedLengths)this._lengths=Object.freeze(U.allowedLengths.slice());if(typeof U.modFromBytes==="boolean")this._mod=U.modFromBytes}let{nBitLength:G,nByteLength:I}=GS($,J);if(I>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");this.ORDER=$,this.BITS=G,this.BYTES=I,Object.freeze(this)}create($){return u$($,this.ORDER)}isValid($){if(typeof $!=="bigint")throw TypeError("invalid field element: expected bigint, got "+typeof $);return O0<=$&&$<this.ORDER}is0($){return $===O0}isValidNot0($){return!this.is0($)&&this.isValid($)}isOdd($){return($&x$)===x$}neg($){return u$(-$,this.ORDER)}eql($,U){return $===U}sqr($){return u$($*$,this.ORDER)}add($,U){return u$($+U,this.ORDER)}sub($,U){return u$($-U,this.ORDER)}mul($,U){return u$($*U,this.ORDER)}pow($,U){return JS(this,$,U)}div($,U){return u$($*z5(U,this.ORDER),this.ORDER)}sqrN($){return $*$}addN($,U){return $+U}subN($,U){return $-U}mulN($,U){return $*U}inv($){return z5($,this.ORDER)}sqrt($){let U=v5.get(this);if(!U)v5.set(this,U=US(this.ORDER));return U(this,$)}toBytes($){return this.isLE?x8($,this.BYTES):vQ($,this.BYTES)}fromBytes($,U=!1){S$($);let{_lengths:J,BYTES:G,isLE:I,ORDER:Q,_mod:X}=this;if(J){if($.length<1||!J.includes($.length)||$.length>G)throw Error("Field.fromBytes: expected "+J+" bytes, got "+$.length);let q=new Uint8Array(G);q.set($,I?0:q.length-$.length),$=q}if($.length!==G)throw Error("Field.fromBytes: expected "+G+" bytes, got "+$.length);let O=I?QU($):OJ($);if(X)O=u$(O,Q);if(!U){if(!this.isValid(O))throw Error("invalid field element: outside of range 0..ORDER")}return O}invertBatch($){return r8(this,$)}cmov($,U,J){return oU(J,"condition"),J?U:$}}Object.freeze(SD.prototype);function gQ($,U={}){return new SD($,U)}function H5($){if(typeof $!=="bigint")throw Error("field order must be bigint");if($<=x$)throw Error("field order must be greater than 1");let U=GG($-x$);return Math.ceil(U/8)}function LD($){let U=H5($);return U+Math.ceil(U/2)}function j5($,U,J=!1){S$($);let G=$.length,I=H5(U),Q=Math.max(LD(U),16);if(G<Q||G>1024)throw Error("expected "+Q+"-1024 bytes of input, got "+G);let X=J?QU($):OJ($),O=u$(X,U-x$)+x$;return J?x8(O,I):vQ(O,I)}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var QG=BigInt(0),DJ=BigInt(1);function h8($,U){let J=U.negate();return $?J:U}function wJ($,U){let J=r8($.Fp,U.map((G)=>G.Z));return U.map((G,I)=>$.fromAffine(G.toAffine(J[I])))}function P5($,U){if(!Number.isSafeInteger($)||$<=0||$>U)throw Error("invalid window size, expected [1.."+U+"], got W="+$)}function CD($,U){P5($,U);let J=Math.ceil(U/$)+1,G=2**($-1),I=2**$,Q=y8($),X=BigInt($);return{windows:J,windowSize:G,mask:Q,maxNumber:I,shiftBy:X}}function T5($,U,J){let{windowSize:G,mask:I,maxNumber:Q,shiftBy:X}=J,O=Number($&I),q=$>>X;if(O>G)O-=Q,q+=DJ;let D=U*G,w=D+Math.abs(O)-1,Y=O===0,v=O<0,W=U%2!==0;return{nextN:q,offset:w,isZero:Y,isNeg:v,isNegF:W,offsetF:D}}var ED=new WeakMap,_5=new WeakMap;function fD($){return _5.get($)||1}function K5($){if($!==QG)throw Error("invalid wNAF")}class l8{BASE;ZERO;Fn;bits;constructor($,U){this.BASE=$.BASE,this.ZERO=$.ZERO,this.Fn=$.Fn,this.bits=U}_unsafeLadder($,U,J=this.ZERO){let G=$;while(U>QG){if(U&DJ)J=J.add(G);G=G.double(),U>>=DJ}return J}precomputeWindow($,U){let{windows:J,windowSize:G}=CD(U,this.bits),I=[],Q=$,X=Q;for(let O=0;O<J;O++){X=Q,I.push(X);for(let q=1;q<G;q++)X=X.add(Q),I.push(X);Q=X.double()}return I}wNAF($,U,J){if(!this.Fn.isValid(J))throw Error("invalid scalar");let G=this.ZERO,I=this.BASE,Q=CD($,this.bits);for(let X=0;X<Q.windows;X++){let{nextN:O,offset:q,isZero:D,isNeg:w,isNegF:Y,offsetF:v}=T5(J,X,Q);if(J=O,D)I=I.add(h8(Y,U[v]));else G=G.add(h8(w,U[q]))}return K5(J),{p:G,f:I}}wNAFUnsafe($,U,J,G=this.ZERO){let I=CD($,this.bits);for(let Q=0;Q<I.windows;Q++){if(J===QG)break;let{nextN:X,offset:O,isZero:q,isNeg:D}=T5(J,Q,I);if(J=X,q)continue;else{let w=U[O];G=G.add(D?w.negate():w)}}return K5(J),G}getPrecomputes($,U,J){let G=ED.get(U);if(!G){if(G=this.precomputeWindow(U,$),$!==1){if(typeof J==="function")G=J(G);ED.set(U,G)}}return G}cached($,U,J){let G=fD($);return this.wNAF(G,this.getPrecomputes(G,$,J),U)}unsafe($,U,J,G){let I=fD($);if(I===1)return this._unsafeLadder($,U,G);return this.wNAFUnsafe(I,this.getPrecomputes(I,$,J),U,G)}createCache($,U){P5(U,this.bits),_5.set($,U),ED.delete($)}hasCache($){return fD($)!==1}}function B5($,U,J,G){let I=U,Q=$.ZERO,X=$.ZERO;while(J>QG||G>QG){if(J&DJ)Q=Q.add(I);if(G&DJ)X=X.add(I);I=I.double(),J>>=DJ,G>>=DJ}return{p1:Q,p2:X}}function A5($,U,J){if(U){if(U.ORDER!==$)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return BD(U),U}else return gQ($,{isLE:J})}function VQ($,U,J={},G){if(G===void 0)G=$==="edwards";if(!U||typeof U!=="object")throw Error(`expected valid ${$} CURVE object`);for(let q of["p","n","h"]){let D=U[q];if(!(typeof D==="bigint"&&D>QG))throw Error(`CURVE.${q} must be positive bigint`)}let I=A5(U.p,J.Fp,G),Q=A5(U.n,J.Fn,G),O=["Gx","Gy","a",$==="weierstrass"?"b":"d"];for(let q of O)if(!I.isValid(U[q]))throw Error(`CURVE.${q} must be valid field element of CURVE.Fp`);return U=Object.freeze(Object.assign({},U)),{CURVE:U,Fp:I,Fn:Q}}function d8($,U){return function(G){let I=$(G);return{secretKey:I,publicKey:U(I)}}}function n8($,U){if(MU($),MU(U),U<0||U>4)throw Error("invalid I2OSP length: "+U);if($<0||$>2**(8*U)-1)throw Error("invalid I2OSP input: "+$);let J=Array.from({length:U}).fill(0);for(let G=U-1;G>=0;G--)J[G]=$&255,$>>>=8;return new Uint8Array(J)}function QS($,U){let J=new Uint8Array($.length);for(let G=0;G<$.length;G++)J[G]=$[G]^U[G];return J}function XS($){if(!IG($)&&typeof $!=="string")throw Error("DST must be Uint8Array or ascii string");let U=typeof $==="string"?WQ($):$;if(U.length===0)throw Error("DST must be non-empty");return U}function bD($,U,J,G){if(S$($),MU(J),U=XS(U),U.length>255)U=G(X0(WQ("H2C-OVERSIZE-DST-"),U));let{outputLen:I,blockLen:Q}=G,X=Math.ceil(J/I);if(J>65535||X>255)throw Error("expand_message_xmd: invalid lenInBytes");let O=X0(U,n8(U.length,1)),q=new Uint8Array(Q),D=n8(J,2),w=Array(X),Y=G(X0(q,$,D,n8(0,1),O));w[0]=G(X0(Y,n8(1,1),O));for(let W=1;W<X;W++){let N=[QS(Y,w[W-1]),n8(W+1,1),O];w[W]=G(X0(...N))}return X0(...w).slice(0,J)}var S5="HashToScalar-";/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var L5=($,U)=>($+($>=0?U:-U)/E5)/U;function OS($,U,J){aU("scalar",$,HU,J);let[[G,I],[Q,X]]=U,O=L5(X*$,J),q=L5(-I*$,J),D=$-O*G-q*Q,w=-O*I-q*X,Y=D<HU,v=w<HU;if(Y)D=-D;if(v)w=-w;let W=y8(Math.ceil(GG(J)/2))+jI;if(D<HU||D>=W||w<HU||w>=W)throw Error("splitScalar (endomorphism): failed for k");return{k1neg:Y,k1:D,k2neg:v,k2:w}}function uD($){if(!["compact","recovered","der"].includes($))throw Error('Signature format must be "compact", "recovered", or "der"');return $}function kD($,U){t0($);let J={};for(let G of Object.keys(U))J[G]=$[G]===void 0?U[G]:$[G];if(oU(J.lowS,"lowS"),oU(J.prehash,"prehash"),J.format!==void 0)uD(J.format);return J}class C5 extends Error{constructor($=""){super($)}}var XU={Err:C5,_tlv:{encode:($,U)=>{let{Err:J}=XU;if(MU($,"tag"),$<0||$>255)throw new J("tlv.encode: wrong tag");if(typeof U!=="string")throw TypeError('"data" expected string, got type='+typeof U);if(U.length&1)throw new J("tlv.encode: unpadded data");let G=U.length/2,I=m8(G);if(I.length/2&128)throw new J("tlv.encode: long form length too big");let Q=G>127?m8(I.length/2|128):"";return m8($)+Q+I+U},decode($,U){let{Err:J}=XU;U=S$(U,void 0,"DER data");let G=0;if($<0||$>255)throw new J("tlv.encode: wrong tag");if(U.length<2||U[G++]!==$)throw new J("tlv.decode: wrong tlv");let I=U[G++],Q=!!(I&128),X=0;if(!Q)X=I;else{let q=I&127;if(!q)throw new J("tlv.decode(long): indefinite length not supported");if(q>4)throw new J("tlv.decode(long): byte length is too big");let D=U.subarray(G,G+q);if(D.length!==q)throw new J("tlv.decode: length bytes not complete");if(D[0]===0)throw new J("tlv.decode(long): zero leftmost byte");for(let w of D)X=X<<8|w;if(G+=q,X<128)throw new J("tlv.decode(long): not minimal encoding")}let O=U.subarray(G,G+X);if(O.length!==X)throw new J("tlv.decode: wrong value length");return{v:O,l:U.subarray(G+X)}}},_int:{encode($){let{Err:U}=XU;if(YQ($),$<HU)throw new U("integer: negative integers are not allowed");let J=m8($);if(Number.parseInt(J[0],16)&8)J="00"+J;if(J.length&1)throw new U("unexpected DER parsing assertion: unpadded hex");return J},decode($){let{Err:U}=XU;if($.length<1)throw new U("invalid signature integer: empty");if($[0]&128)throw new U("invalid signature integer: negative");if($.length>1&&$[0]===0&&!($[1]&128))throw new U("invalid signature integer: unnecessary leading zero");return OJ($)}},toSig($){let{Err:U,_int:J,_tlv:G}=XU,I=S$($,void 0,"signature"),{v:Q,l:X}=G.decode(48,I);if(X.length)throw new U("invalid signature: left bytes after parsing");let{v:O,l:q}=G.decode(2,Q),{v:D,l:w}=G.decode(2,q);if(w.length)throw new U("invalid signature: left bytes after parsing");return{r:J.decode(O),s:J.decode(D)}},hexFromSig($){let{_tlv:U,_int:J}=XU,G=U.encode(2,J.encode($.r)),I=U.encode(2,J.encode($.s)),Q=G+I;return U.encode(48,Q)}};Object.freeze(XU._tlv);Object.freeze(XU._int);Object.freeze(XU);var HU=BigInt(0),jI=BigInt(1),E5=BigInt(2),NQ=BigInt(3),qS=BigInt(4);function f5($,U={}){let J=VQ("weierstrass",$,U),G=J.Fp,I=J.Fn,Q=J.CURVE,{h:X,n:O}=Q;t0(U,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object"});let{endo:q,allowInfinityPoint:D}=U;if(q){if(!G.is0(Q.a)||typeof q.beta!=="bigint"||!Array.isArray(q.basises))throw Error('invalid endo: expected "beta": bigint and "basises": array')}let w=k5(G,I);function Y(){if(!G.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}function v(C,A,E){if(D&&A.is0())return Uint8Array.of(0);let{x:M,y:K}=A.toAffine(),T=G.toBytes(M);if(oU(E,"isCompressed"),E){Y();let f=!G.isOdd(K);return X0(b5(f),T)}else return X0(Uint8Array.of(4),T,G.toBytes(K))}function W(C){S$(C,void 0,"Point");let{publicKey:A,publicKeyUncompressed:E}=w,M=C.length,K=C[0],T=C.subarray(1);if(D&&M===1&&K===0)return{x:G.ZERO,y:G.ZERO};if(M===A&&(K===2||K===3)){let f=G.fromBytes(T);if(!G.isValid(f))throw Error("bad point: is not on curve, wrong x");let P=V(f),u;try{u=G.sqrt(P)}catch(U$){let X$=U$ instanceof Error?": "+U$.message:"";throw Error("bad point: is not on curve, sqrt error"+X$)}Y();let y=G.isOdd(u);if((K&1)===1!==y)u=G.neg(u);return{x:f,y:u}}else if(M===E&&K===4){let f=G.BYTES,P=G.fromBytes(T.subarray(0,f)),u=G.fromBytes(T.subarray(f,f*2));if(!j(P,u))throw Error("bad point: is not on curve");return{x:P,y:u}}else throw Error(`bad point: got length ${M}, expected compressed=${A} or uncompressed=${E}`)}let N=U.toBytes===void 0?v:U.toBytes,g=U.fromBytes===void 0?W:U.fromBytes;function V(C){let A=G.sqr(C),E=G.mul(A,C);return G.add(G.add(E,G.mul(C,Q.a)),Q.b)}function j(C,A){let E=G.sqr(A),M=V(C);return G.eql(E,M)}if(!j(Q.Gx,Q.Gy))throw Error("bad curve params: generator point");let H=G.mul(G.pow(Q.a,NQ),qS),S=G.mul(G.sqr(Q.b),BigInt(27));if(G.is0(G.add(H,S)))throw Error("bad curve params: a or b");function B(C,A,E=!1){if(!G.isValid(A)||E&&G.is0(A))throw Error(`bad point coordinate ${C}`);return A}function k(C){if(!(C instanceof _))throw Error("Weierstrass Point expected")}function m(C){if(!q||!q.basises)throw Error("no endo");return OS(C,q.basises,I.ORDER)}function h(C,A,E,M,K){return E=new _(G.mul(E.X,C),E.Y,E.Z),A=h8(M,A),E=h8(K,E),A.add(E)}class _{static BASE=new _(Q.Gx,Q.Gy,G.ONE);static ZERO=new _(G.ZERO,G.ONE,G.ZERO);static Fp=G;static Fn=I;X;Y;Z;constructor(C,A,E){this.X=B("x",C),this.Y=B("y",A,!0),this.Z=B("z",E),Object.freeze(this)}static CURVE(){return Q}static fromAffine(C){let{x:A,y:E}=C||{};if(!C||!G.isValid(A)||!G.isValid(E))throw Error("invalid affine point");if(C instanceof _)throw Error("projective point not allowed");if(G.is0(A)&&G.is0(E))return _.ZERO;return new _(A,E,G.ONE)}static fromBytes(C){let A=_.fromAffine(g(S$(C,void 0,"point")));return A.assertValidity(),A}static fromHex(C){return _.fromBytes(UG(C))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(C=8,A=!0){if(t.createCache(this,C),!A)this.multiply(NQ);return this}assertValidity(){let C=this;if(C.is0()){if(U.allowInfinityPoint&&G.is0(C.X)&&G.eql(C.Y,G.ONE)&&G.is0(C.Z))return;throw Error("bad point: ZERO")}let{x:A,y:E}=C.toAffine();if(!G.isValid(A)||!G.isValid(E))throw Error("bad point: x or y not field elements");if(!j(A,E))throw Error("bad point: equation left != right");if(!C.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:C}=this.toAffine();if(!G.isOdd)throw Error("Field doesn't support isOdd");return!G.isOdd(C)}equals(C){k(C);let{X:A,Y:E,Z:M}=this,{X:K,Y:T,Z:f}=C,P=G.eql(G.mul(A,f),G.mul(K,M)),u=G.eql(G.mul(E,f),G.mul(T,M));return P&&u}negate(){return new _(this.X,G.neg(this.Y),this.Z)}double(){let{a:C,b:A}=Q,E=G.mul(A,NQ),{X:M,Y:K,Z:T}=this,f=G.ZERO,P=G.ZERO,u=G.ZERO,y=G.mul(M,M),n=G.mul(K,K),U$=G.mul(T,T),X$=G.mul(M,K);return X$=G.add(X$,X$),u=G.mul(M,T),u=G.add(u,u),f=G.mul(C,u),P=G.mul(E,U$),P=G.add(f,P),f=G.sub(n,P),P=G.add(n,P),P=G.mul(f,P),f=G.mul(X$,f),u=G.mul(E,u),U$=G.mul(C,U$),X$=G.sub(y,U$),X$=G.mul(C,X$),X$=G.add(X$,u),u=G.add(y,y),y=G.add(u,y),y=G.add(y,U$),y=G.mul(y,X$),P=G.add(P,y),U$=G.mul(K,T),U$=G.add(U$,U$),y=G.mul(U$,X$),f=G.sub(f,y),u=G.mul(U$,n),u=G.add(u,u),u=G.add(u,u),new _(f,P,u)}add(C){k(C);let{X:A,Y:E,Z:M}=this,{X:K,Y:T,Z:f}=C,P=G.ZERO,u=G.ZERO,y=G.ZERO,n=Q.a,U$=G.mul(Q.b,NQ),X$=G.mul(A,K),q$=G.mul(E,T),Y$=G.mul(M,f),V$=G.add(A,E),W$=G.add(K,T);V$=G.mul(V$,W$),W$=G.add(X$,q$),V$=G.sub(V$,W$),W$=G.add(A,M);let g$=G.add(K,f);return W$=G.mul(W$,g$),g$=G.add(X$,Y$),W$=G.sub(W$,g$),g$=G.add(E,M),P=G.add(T,f),g$=G.mul(g$,P),P=G.add(q$,Y$),g$=G.sub(g$,P),y=G.mul(n,W$),P=G.mul(U$,Y$),y=G.add(P,y),P=G.sub(q$,y),y=G.add(q$,y),u=G.mul(P,y),q$=G.add(X$,X$),q$=G.add(q$,X$),Y$=G.mul(n,Y$),W$=G.mul(U$,W$),q$=G.add(q$,Y$),Y$=G.sub(X$,Y$),Y$=G.mul(n,Y$),W$=G.add(W$,Y$),X$=G.mul(q$,W$),u=G.add(u,X$),X$=G.mul(g$,W$),P=G.mul(V$,P),P=G.sub(P,X$),X$=G.mul(V$,q$),y=G.mul(g$,y),y=G.add(y,X$),new _(P,u,y)}subtract(C){return k(C),this.add(C.negate())}is0(){return this.equals(_.ZERO)}multiply(C){let{endo:A}=U;if(!I.isValidNot0(C))throw RangeError("invalid scalar: out of range");let E,M,K=(T)=>t.cached(this,T,(f)=>wJ(_,f));if(A){let{k1neg:T,k1:f,k2neg:P,k2:u}=m(C),{p:y,f:n}=K(f),{p:U$,f:X$}=K(u);M=n.add(X$),E=h(A.beta,y,U$,T,P)}else{let{p:T,f}=K(C);E=T,M=f}return wJ(_,[E,M])[0]}multiplyUnsafe(C){let{endo:A}=U,E=this,M=C;if(!I.isValid(M))throw RangeError("invalid scalar: out of range");if(M===HU||E.is0())return _.ZERO;if(M===jI)return E;if(t.hasCache(this))return this.multiply(M);if(A){let{k1neg:K,k1:T,k2neg:f,k2:P}=m(M),{p1:u,p2:y}=B5(_,E,T,P);return h(A.beta,u,y,K,f)}else return t.unsafe(E,M)}toAffine(C){let A=this,E=C,{X:M,Y:K,Z:T}=A;if(G.eql(T,G.ONE))return{x:M,y:K};let f=A.is0();if(E==null)E=f?G.ONE:G.inv(T);let P=G.mul(M,E),u=G.mul(K,E),y=G.mul(T,E);if(f)return{x:G.ZERO,y:G.ZERO};if(!G.eql(y,G.ONE))throw Error("invZ was invalid");return{x:P,y:u}}isTorsionFree(){let{isTorsionFree:C}=U;if(X===jI)return!0;if(C)return C(_,this);return t.unsafe(this,O).is0()}clearCofactor(){let{clearCofactor:C}=U;if(X===jI)return this;if(C)return C(_,this);return this.multiplyUnsafe(X)}isSmallOrder(){if(X===jI)return this.is0();return this.clearCofactor().is0()}toBytes(C=!0){return oU(C,"isCompressed"),this.assertValidity(),N(_,this,C)}toHex(C=!0){return $G(this.toBytes(C))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let x=I.BITS,t=new l8(_,U.endo?Math.ceil(x/2):x);if(x>=8)_.BASE.precompute(8);return Object.freeze(_.prototype),Object.freeze(_),_}function b5($){return Uint8Array.of($?2:3)}function k5($,U){return{secretKey:U.BYTES,publicKey:1+$.BYTES,publicKeyUncompressed:1+2*$.BYTES,publicKeyHasPrefix:!0,signature:2*U.BYTES}}function DS($,U={}){let{Fn:J}=$,G=U.randomBytes===void 0?JG:U.randomBytes,I=Object.assign(k5($.Fp,J),{seed:Math.max(LD(J.ORDER),16)});function Q(W){try{let N=J.fromBytes(W);return J.isValidNot0(N)}catch(N){return!1}}function X(W,N){let{publicKey:g,publicKeyUncompressed:V}=I;try{let j=W.length;if(N===!0&&j!==g)return!1;if(N===!1&&j!==V)return!1;return!!$.fromBytes(W)}catch(j){return!1}}function O(W){return W=W===void 0?G(I.seed):W,j5(S$(W,I.seed,"seed"),J.ORDER)}function q(W,N=!0){return $.BASE.multiply(J.fromBytes(W)).toBytes(N)}function D(W){let{secretKey:N,publicKey:g,publicKeyUncompressed:V}=I,j=J._lengths;if(!IG(W))return;let H=S$(W,void 0,"key").length,S=H===g||H===V,B=H===N||!!j?.includes(H);if(S&&B)return;return S}function w(W,N,g=!0){if(D(W)===!0)throw Error("first arg must be private key");if(D(N)===!1)throw Error("second arg must be public key");let V=J.fromBytes(W);return $.fromBytes(N).multiply(V).toBytes(g)}let Y={isValidSecretKey:Q,isValidPublicKey:X,randomSecretKey:O},v=d8(O,q);return Object.freeze(Y),Object.freeze(I),Object.freeze({getPublicKey:q,getSharedSecret:w,keygen:v,Point:$,utils:Y,lengths:I})}function u5($,U,J={}){let G=U;mU(G),t0(J,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"}),J=Object.assign({},J);let I=J.randomBytes===void 0?JG:J.randomBytes,Q=J.hmac===void 0?(K,T)=>WU(G,K,T):J.hmac,{Fp:X,Fn:O}=$,{ORDER:q,BITS:D}=O,{keygen:w,getPublicKey:Y,getSharedSecret:v,utils:W,lengths:N}=DS($,J),g={prehash:!0,lowS:typeof J.lowS==="boolean"?J.lowS:!0,format:"compact",extraEntropy:!1},V=q*E5+jI<X.ORDER;function j(K){let T=q>>jI;return K>T}function H(K,T){if(!O.isValidNot0(T))throw Error(`invalid signature ${K}: out of range 1..Point.Fn.ORDER`);return T}function S(){if(V)throw Error('"recovered" sig type is not supported for cofactor >2 curves')}function B(K,T){uD(T);let f=N.signature,P=T==="compact"?f:T==="recovered"?f+1:void 0;return S$(K,P)}class k{r;s;recovery;constructor(K,T,f){if(this.r=H("r",K),this.s=H("s",T),f!=null){if(S(),![0,1,2,3].includes(f))throw Error("invalid recovery id");this.recovery=f}Object.freeze(this)}static fromBytes(K,T=g.format){B(K,T);let f;if(T==="der"){let{r:n,s:U$}=XU.toSig(S$(K));return new k(n,U$)}if(T==="recovered")f=K[0],T="compact",K=K.subarray(1);let P=N.signature/2,u=K.subarray(0,P),y=K.subarray(P,P*2);return new k(O.fromBytes(u),O.fromBytes(y),f)}static fromHex(K,T){return this.fromBytes(UG(K),T)}assertRecovery(){let{recovery:K}=this;if(K==null)throw Error("invalid recovery id: must be present");return K}addRecoveryBit(K){return new k(this.r,this.s,K)}recoverPublicKey(K){let{r:T,s:f}=this,P=this.assertRecovery(),u=P===2||P===3?T+q:T;if(!X.isValid(u))throw Error("invalid recovery id: sig.r+curve.n != R.x");let y=X.toBytes(u),n=$.fromBytes(X0(b5((P&1)===0),y)),U$=O.inv(u),X$=h(S$(K,void 0,"msgHash")),q$=O.create(-X$*U$),Y$=O.create(f*U$),V$=$.BASE.multiplyUnsafe(q$).add(n.multiplyUnsafe(Y$));if(V$.is0())throw Error("invalid recovery: point at infinify");return V$.assertValidity(),V$}hasHighS(){return j(this.s)}toBytes(K=g.format){if(uD(K),K==="der")return UG(XU.hexFromSig(this));let{r:T,s:f}=this,P=O.toBytes(T),u=O.toBytes(f);if(K==="recovered")return S(),X0(Uint8Array.of(this.assertRecovery()),P,u);return X0(P,u)}toHex(K){return $G(this.toBytes(K))}}Object.freeze(k.prototype),Object.freeze(k);let m=J.bits2int===void 0?function(T){if(T.length>8192)throw Error("input is too large");let f=OJ(T),P=T.length*8-D;return P>0?f>>BigInt(P):f}:J.bits2int,h=J.bits2int_modN===void 0?function(T){return O.create(m(T))}:J.bits2int_modN,_=y8(D);function x(K){return aU("num < 2^"+D,K,HU,_),O.toBytes(K)}function t(K,T){return S$(K,void 0,"message"),T?S$(G(K),void 0,"prehashed message"):K}function C(K,T,f){let{lowS:P,prehash:u,extraEntropy:y}=kD(f,g);K=t(K,u);let n=h(K),U$=O.fromBytes(T);if(!O.isValidNot0(U$))throw Error("invalid private key");let X$=[x(U$),x(n)];if(y!=null&&y!==!1){let W$=y===!0?I(N.secretKey):y;X$.push(S$(W$,void 0,"extraEntropy"))}let q$=X0(...X$),Y$=n;function V$(W$){let g$=m(W$);if(!O.isValidNot0(g$))return;let M$=O.inv(g$),f$=$.BASE.multiply(g$).toAffine(),k$=O.create(f$.x);if(k$===HU)return;let D0=O.create(M$*O.create(Y$+k$*U$));if(D0===HU)return;let w0=(f$.x===k$?0:2)|Number(f$.y&jI),L0=D0;if(P&&j(D0))L0=O.neg(D0),w0^=1;return new k(k$,L0,V?void 0:w0)}return{seed:q$,k2sig:V$}}function A(K,T,f={}){let{seed:P,k2sig:u}=C(K,T,f);return w5(G.outputLen,O.BYTES,Q)(P,u).toBytes(f.format)}function E(K,T,f,P={}){let{lowS:u,prehash:y,format:n}=kD(P,g);if(f=S$(f,void 0,"publicKey"),T=t(T,y),!IG(K)){let U$=K instanceof k?", use sig.toBytes()":"";throw Error("verify expects Uint8Array signature"+U$)}B(K,n);try{let U$=k.fromBytes(K,n),X$=$.fromBytes(f);if(u&&U$.hasHighS())return!1;let{r:q$,s:Y$}=U$,V$=h(T),W$=O.inv(Y$),g$=O.create(V$*W$),M$=O.create(q$*W$),f$=$.BASE.multiplyUnsafe(g$).add(X$.multiplyUnsafe(M$));if(f$.is0())return!1;return O.create(f$.x)===q$}catch(U$){return!1}}function M(K,T,f={}){let{prehash:P}=kD(f,g);return T=t(T,P),k.fromBytes(K,"recovered").recoverPublicKey(T).toBytes()}return Object.freeze({keygen:w,getPublicKey:Y,getSharedSecret:v,utils:W,lengths:N,Point:$,sign:A,verify:E,recoverPublicKey:M,Signature:k,hash:G})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var wS=(()=>({p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")}))();var zS=f5(wS),XG=u5(zS,l$);/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var TI=BigInt(0),f0=BigInt(1),FD=BigInt(2),YS=BigInt(8);function vS($,U,J,G){let I=$.sqr(J),Q=$.sqr(G),X=$.add($.mul(U.a,I),Q),O=$.add($.ONE,$.mul(U.d,$.mul(I,Q)));return $.eql(X,O)}function F5($,U={}){let J=U,G=VQ("edwards",$,J,J.FpFnLE),{Fp:I,Fn:Q}=G,X=G.CURVE,{h:O}=X;t0(J,{},{uvRatio:"function"});let q=FD<<BigInt(Q.BYTES*8)-f0,D=(g)=>I.create(g),w=J.uvRatio===void 0?(g,V)=>{try{return{isValid:!0,value:I.sqrt(I.div(g,V))}}catch(j){return{isValid:!1,value:TI}}}:J.uvRatio;if(!vS(I,X,X.Gx,X.Gy))throw Error("bad curve params: generator point");function Y(g,V,j=!1){let H=j?f0:TI;return aU("coordinate "+g,V,H,q),V}function v(g){if(!(g instanceof W))throw Error("EdwardsPoint expected")}class W{static BASE=new W(X.Gx,X.Gy,f0,D(X.Gx*X.Gy));static ZERO=new W(TI,f0,f0,TI);static Fp=I;static Fn=Q;X;Y;Z;T;constructor(g,V,j,H){this.X=Y("x",g),this.Y=Y("y",V),this.Z=Y("z",j,!0),this.T=Y("t",H),Object.freeze(this)}static CURVE(){return X}static fromAffine(g){if(g instanceof W)throw Error("extended point not allowed");let{x:V,y:j}=g||{};return Y("x",V),Y("y",j),new W(V,j,f0,D(V*j))}static fromBytes(g,V=!1){let j=I.BYTES,{a:H,d:S}=X;g=HI(S$(g,j,"point")),oU(V,"zip215");let B=HI(g),k=g[j-1];B[j-1]=k&-129;let m=QU(B),h=V?q:I.ORDER;aU("point.y",m,TI,h);let _=D(m*m),x=D(_-f0),t=D(S*_-H),{isValid:C,value:A}=w(x,t);if(!C)throw Error("bad point: invalid y coordinate");let E=(A&f0)===f0,M=(k&128)!==0;if(!V&&A===TI&&M)throw Error("bad point: x=0 and x_0=1");if(M!==E)A=D(-A);return W.fromAffine({x:A,y:m})}static fromHex(g,V=!1){return W.fromBytes(UG(g),V)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(g=8,V=!0){if(N.createCache(this,g),!V)this.multiply(FD);return this}assertValidity(){let g=this,{a:V,d:j}=X;if(g.is0())throw Error("bad point: ZERO");let{X:H,Y:S,Z:B,T:k}=g,m=D(H*H),h=D(S*S),_=D(B*B),x=D(_*_),t=D(m*V),C=D(_*D(t+h)),A=D(x+D(j*D(m*h)));if(C!==A)throw Error("bad point: equation left != right (1)");let E=D(H*S),M=D(B*k);if(E!==M)throw Error("bad point: equation left != right (2)")}equals(g){v(g);let{X:V,Y:j,Z:H}=this,{X:S,Y:B,Z:k}=g,m=D(V*k),h=D(S*H),_=D(j*k),x=D(B*H);return m===h&&_===x}is0(){return this.equals(W.ZERO)}negate(){return new W(D(-this.X),this.Y,this.Z,D(-this.T))}double(){let{a:g}=X,{X:V,Y:j,Z:H}=this,S=D(V*V),B=D(j*j),k=D(FD*D(H*H)),m=D(g*S),h=V+j,_=D(D(h*h)-S-B),x=m+B,t=x-k,C=m-B,A=D(_*t),E=D(x*C),M=D(_*C),K=D(t*x);return new W(A,E,K,M)}add(g){v(g);let{a:V,d:j}=X,{X:H,Y:S,Z:B,T:k}=this,{X:m,Y:h,Z:_,T:x}=g,t=D(H*m),C=D(S*h),A=D(k*j*x),E=D(B*_),M=D((H+S)*(m+h)-t-C),K=E-A,T=E+A,f=D(C-V*t),P=D(M*K),u=D(T*f),y=D(M*f),n=D(K*T);return new W(P,u,n,y)}subtract(g){return v(g),this.add(g.negate())}multiply(g){if(!Q.isValidNot0(g))throw RangeError("invalid scalar: expected 1 <= sc < curve.n");let{p:V,f:j}=N.cached(this,g,(H)=>wJ(W,H));return wJ(W,[V,j])[0]}multiplyUnsafe(g){if(!Q.isValid(g))throw RangeError("invalid scalar: expected 0 <= sc < curve.n");if(g===TI)return W.ZERO;if(this.is0()||g===f0)return this;return N.unsafe(this,g,(V)=>wJ(W,V))}isSmallOrder(){return this.clearCofactor().is0()}isTorsionFree(){return N.unsafe(this,X.n).is0()}toAffine(g){let V=this,j=g,{X:H,Y:S,Z:B}=V,k=V.is0();if(j==null)j=k?YS:I.inv(B);let m=D(H*j),h=D(S*j),_=I.mul(B,j);if(k)return{x:TI,y:f0};if(_!==f0)throw Error("invZ was invalid");return{x:m,y:h}}clearCofactor(){if(O===f0)return this;return this.multiplyUnsafe(O)}toBytes(){let{x:g,y:V}=this.toAffine(),j=I.toBytes(V);return j[j.length-1]|=g&f0?128:0,j}toHex(){return $G(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}}let N=new l8(W,Q.BITS);if(Q.BITS>=8)W.BASE.precompute(8);return Object.freeze(W.prototype),Object.freeze(W),W}class mD{static BASE;static ZERO;static Fp;static Fn;ep;constructor($){this.ep=$}static fromBytes($){PD()}static fromHex($){PD()}get x(){return this.toAffine().x}get y(){return this.toAffine().y}clearCofactor(){return this}assertValidity(){this.ep.assertValidity()}toAffine($){return this.ep.toAffine($)}toHex(){return $G(this.toBytes())}toString(){return this.toHex()}isTorsionFree(){return!0}isSmallOrder(){return!1}add($){return this.assertSame($),this.init(this.ep.add($.ep))}subtract($){return this.assertSame($),this.init(this.ep.subtract($.ep))}multiply($){return this.init(this.ep.multiply($))}multiplyUnsafe($){return this.init(this.ep.multiplyUnsafe($))}double(){return this.init(this.ep.double())}negate(){return this.init(this.ep.negate())}precompute($,U){return this.ep.precompute($,U),this}}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var i8=BigInt(0),OG=BigInt(1),ZQ=BigInt(2);function WS($){return t0($,{P:"bigint",type:"string",adjustScalarBytes:"function",powPminus2:"function"},{randomBytes:"function"}),Object.freeze({...$})}function m5($){let U=WS($),{P:J,type:G,adjustScalarBytes:I,powPminus2:Q,randomBytes:X}=U,O=G==="x25519";if(!O&&G!=="x448")throw Error("invalid type");let q=X===void 0?JG:X,D=O?255:448,w=O?32:56,Y=O?BigInt(9):BigInt(5),v=O?BigInt(121665):BigInt(39081),W=O?ZQ**BigInt(254):ZQ**BigInt(447),N=O?BigInt(8)*ZQ**BigInt(251)-OG:BigInt(4)*ZQ**BigInt(445)-OG,g=W+N+OG,V=(M)=>u$(M,J),j=H(Y);function H(M){return x8(V(M),w)}function S(M){let K=HI(S$(M,w,"uCoordinate"));if(O)K[31]&=127;return V(QU(K))}function B(M){return QU(I(HI(S$(M,w,"scalar"))))}function k(M,K){let T=t(S(K),B(M));if(T===i8)throw Error("invalid private or public key received");return H(T)}function m(M){return k(M,j)}let h=m,_=k;function x(M,K,T){let f=V(M*(K-T));return K=V(K-f),T=V(T+f),{x_2:K,x_3:T}}function t(M,K){aU("u",M,i8,J),aU("scalar",K,W,g);let T=K,f=M,P=OG,u=i8,y=M,n=OG,U$=i8;for(let q$=BigInt(D-1);q$>=i8;q$--){let Y$=T>>q$&OG;U$^=Y$,{x_2:P,x_3:y}=x(U$,P,y),{x_2:u,x_3:n}=x(U$,u,n),U$=Y$;let V$=P+u,W$=V(V$*V$),g$=P-u,M$=V(g$*g$),f$=W$-M$,k$=y+n,D0=y-n,w0=V(D0*V$),L0=V(k$*g$),YU=w0+L0,vU=w0-L0;y=V(YU*YU),n=V(f*V(vU*vU)),P=V(W$*M$),u=V(f$*(W$+V(v*f$)))}({x_2:P,x_3:y}=x(U$,P,y)),{x_2:u,x_3:n}=x(U$,u,n);let X$=Q(u);return V(P*X$)}let C={secretKey:w,publicKey:w,seed:w},A=(M)=>{return M=M===void 0?q(w):M,S$(M,C.seed,"seed"),M},E={randomSecretKey:A};return Object.freeze(C),Object.freeze(E),Object.freeze({keygen:d8(A,h),getSharedSecret:_,getPublicKey:h,scalarMult:k,scalarMultBase:m,utils:E,GuBytes:j.slice(),lengths:C})}/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */var gS=BigInt(0),eU=BigInt(1),x5=BigInt(2),VS=BigInt(3),NS=BigInt(5),ZS=BigInt(8),YJ=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed"),hD=(()=>({p:YJ,n:BigInt("0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed"),h:ZS,a:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec"),d:BigInt("0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3"),Gx:BigInt("0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a"),Gy:BigInt("0x6666666666666666666666666666666666666666666666666666666666666658")}))();function h5($){let U=BigInt(10),J=BigInt(20),G=BigInt(40),I=BigInt(80),Q=YJ,O=$*$%Q*$%Q,q=e0(O,x5,Q)*O%Q,D=e0(q,eU,Q)*$%Q,w=e0(D,NS,Q)*D%Q,Y=e0(w,U,Q)*w%Q,v=e0(Y,J,Q)*Y%Q,W=e0(v,G,Q)*v%Q,N=e0(W,I,Q)*W%Q,g=e0(N,I,Q)*W%Q,V=e0(g,U,Q)*w%Q;return{pow_p_5_8:e0(V,x5,Q)*$%Q,b2:O}}function RS($){return $[0]&=248,$[31]&=127,$[31]|=64,$}var xD=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");function lD($,U){let J=YJ,G=u$(U*U*U,J),I=u$(G*G*U,J),Q=h5($*I).pow_p_5_8,X=u$($*G*Q,J),O=u$(U*X*X,J),q=X,D=u$(X*xD,J),w=O===$,Y=O===u$(-$,J),v=O===u$(-$*xD,J);if(w)X=q;if(Y||v)X=D;if(tU(X,J))X=u$(-X,J);return{isValid:w||Y,value:X}}var zJ=F5(hD,{uvRatio:lD}),KI=(()=>zJ.Fp)(),l5=(()=>zJ.Fn)();var RQ=(()=>{let $=YJ;return m5({P:$,type:"x25519",powPminus2:(U)=>{let{pow_p_5_8:J,b2:G}=h5(U);return u$(e0(J,VS,$)*G,$)},adjustScalarBytes:RS})})();var yD=xD,MS=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),HS=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),jS=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),TS=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952"),y5=($)=>lD(eU,$),KS=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),rD=($)=>KI.create(QU($)&KS);function r5($){let{d:U}=hD,J=YJ,G=(j)=>KI.create(j),I=G(yD*$*$),Q=G((I+eU)*jS),X=BigInt(-1),O=G((X-U*I)*G(I+U)),{isValid:q,value:D}=lD(Q,O),w=G(D*$);if(!tU(w,J))w=G(-w);if(!q)D=w;if(!q)X=I;let Y=G(X*(I-eU)*TS-O),v=D*D,W=G((D+D)*O),N=G(Y*MS),g=G(eU-v),V=G(eU+v);return new zJ(G(W*V),G(g*N),G(N*V),G(W*g))}class K0 extends mD{static BASE=(()=>new K0(zJ.BASE))();static ZERO=(()=>new K0(zJ.ZERO))();static Fp=(()=>KI)();static Fn=(()=>l5)();constructor($){super($)}static fromAffine($){return new K0(zJ.fromAffine($))}assertSame($){if(!($ instanceof K0))throw Error("RistrettoPoint expected")}init($){return new K0($)}static fromBytes($){$0($,32);let{a:U,d:J}=hD,G=YJ,I=(S)=>KI.create(S),Q=rD($);if(!D5(KI.toBytes(Q),$)||tU(Q,G))throw Error("invalid ristretto255 encoding 1");let X=I(Q*Q),O=I(eU+U*X),q=I(eU-U*X),D=I(O*O),w=I(q*q),Y=I(U*J*D-w),{isValid:v,value:W}=y5(I(Y*w)),N=I(W*q),g=I(W*N*Y),V=I((Q+Q)*N);if(tU(V,G))V=I(-V);let j=I(O*g),H=I(V*j);if(!v||tU(H,G)||j===gS)throw Error("invalid ristretto255 encoding 2");return new K0(new zJ(V,j,eU,H))}static fromHex($){return K0.fromBytes(Y8($))}toBytes(){let{X:$,Y:U,Z:J,T:G}=this.ep,I=YJ,Q=(g)=>KI.create(g),X=Q(Q(J+U)*Q(J-U)),O=Q($*U),q=Q(O*O),{value:D}=y5(Q(X*q)),w=Q(D*X),Y=Q(D*O),v=Q(w*Y*G),W;if(tU(G*v,I)){let g=Q(U*yD),V=Q($*yD);$=g,U=V,W=Q(w*HS)}else W=Y;if(tU($*v,I))U=Q(-U);let N=Q((J-U)*W);if(tU(N,I))N=Q(-N);return KI.toBytes(N)}equals($){this.assertSame($);let{X:U,Y:J}=this.ep,{X:G,Y:I}=$.ep,Q=(q)=>KI.create(q),X=Q(U*I)===Q(J*G),O=Q(J*I)===Q(U*G);return X||O}is0(){return this.equals(K0.ZERO)}}Object.freeze(K0.BASE);Object.freeze(K0.ZERO);Object.freeze(K0.prototype);Object.freeze(K0);var AS=Object.freeze({Point:K0,hashToCurve($,U){let J=U?.DST===void 0?"ristretto255_XMD:SHA-512_R255MAP_RO_":U.DST,G=bD($,J,64,F4);return AS.deriveToCurve(G)},hashToScalar($,U={DST:S5}){let J=bD($,U.DST,64,F4);return l5.create(QU(J))},deriveToCurve($){$0($,64);let U=rD($.subarray(0,32)),J=r5(U),G=rD($.subarray(32,64)),I=r5(G);return new K0(J.add(I))}});var d5=!1,PS=!1;async function n5($,U){if(PS)return await U();try{return await $()}catch(J){if(J instanceof ReferenceError||J instanceof DOMException&&J.name==="NotSupportedError")return await U();else throw J}}async function MQ($,U){return await n5(async()=>{let J=dD($)?$:await BS($),G=await crypto.subtle.importKey("raw",SS(U),{name:"X25519"},d5,[]);return new Uint8Array(await crypto.subtle.deriveBits({name:"X25519",public:G},J,256))},()=>{if(dD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return RQ.scalarMult($,U)})}async function c8($){return await n5(async()=>{return MQ($,RQ.GuBytes)},()=>{if(dD($))throw Error("CryptoKey provided but X25519 WebCrypto is not supported");return RQ.scalarMultBase($)})}var _S=new Uint8Array([48,46,2,1,0,48,5,6,3,43,101,110,4,34,4,32]);async function BS($){if($.length!==32)throw Error("X25519 private key must be 32 bytes");let U=new Uint8Array([..._S,...$]);return crypto.subtle.importKey("pkcs8",U,{name:"X25519"},d5,["deriveBits"])}function dD($){return typeof CryptoKey<"u"&&$ instanceof CryptoKey}function SS($){return $}class nD{s;transcript=[];buf=new Uint8Array(0);constructor($){this.s=$.getReader()}async readLine(){let $=[];while(!0){let U=this.buf.indexOf(10);if(U>=0)return $.push(this.buf.subarray(0,U)),this.transcript.push(this.buf.subarray(0,U+1)),this.buf=this.buf.subarray(U+1),CS(vJ($));if(this.buf.length>0)$.push(this.buf),this.transcript.push(this.buf);let J=await this.s.read();if(J.done)return this.buf=vJ($),null;this.buf=J.value}}close(){return this.s.releaseLock(),{rest:this.buf,transcript:vJ(this.transcript)}}}function CS($){return $.forEach((U)=>{if(U<32||U>126)throw Error("invalid non-ASCII byte in header")}),new TextDecoder().decode($)}function vJ($){let U=$.reduce((I,Q)=>I+Q.length,0),J=new Uint8Array(U),G=0;for(let I of $)J.set(I,G),G+=I.length;return J}function qG($,...U){return $.pipeThrough(new TransformStream({start(J){for(let G of U)J.enqueue(G)}}))}function HQ($){return new ReadableStream({start(U){U.enqueue($),U.close()}})}async function iD($){if(!($ instanceof ReadableStream))throw Error("readAll expects a ReadableStream<Uint8Array>");return new Uint8Array(await new Response($).arrayBuffer())}async function i5($){if(!($ instanceof ReadableStream))throw Error("readAllString expects a ReadableStream<Uint8Array>");return await new Response($).text()}async function c5($,U){let J=$.getReader(),G=[],I=0;while(I<U){let{done:q,value:D}=await J.read();if(q)throw Error("stream ended before reading "+U.toString()+" bytes");G.push(D),I+=D.length}J.releaseLock();let Q=vJ(G),X=Q.subarray(0,U),O=qG($,Q.subarray(U));return{data:X,rest:O}}class jU{args;body;constructor($,U){this.args=$,this.body=U}}async function ES($){let U=await $.readLine();if(U===null)throw Error("invalid stanza");let J=U.split(" ");if(J.length<2||J.shift()!=="->")return{next:U};for(let Q of J)if(Q.length===0)throw Error("invalid stanza");let G=[];for(;;){let Q=await $.readLine();if(Q===null)throw Error("invalid stanza");let X=v0.decode(Q);if(X.length>48)throw Error("invalid stanza");if(G.push(X),X.length<48)break}let I=vJ(G);return{s:new jU(J,I)}}async function p5($){let U=new nD($),J=await U.readLine();if(J!=="age-encryption.org/v1")throw Error("invalid version "+(J??"line"));let G=[];for(;;){let{s:I,next:Q}=await ES(U);if(I!==void 0){G.push(I);continue}if(!Q.startsWith("--- "))throw Error("invalid header");let X=v0.decode(Q.slice(4)),{rest:O,transcript:q}=U.close(),D=q.slice(0,q.length-1-Q.length+3);return{stanzas:G,headerNoMAC:D,MAC:X,headerSize:q.length,rest:qG($,O)}}}function cD($){let U=[];U.push(`age-encryption.org/v1
 `);for(let J of $){U.push("-> "+J.args.join(" ")+`
 `);for(let G=0;G<J.body.length;G+=48){let I=G+48;if(I>J.body.length)I=J.body.length;U.push(v0.encode(J.body.subarray(G,I))+`
 `)}if(J.body.length%48===0)U.push(`

package/dist/index.js CHANGED Viewed

@@ -724,7 +724,7 @@ printf 'REMOTE_ARTIFACT_DIR=%s\\n' "$remote_dir"
 `),I}async function WF($,U){let J=await Y0($),G=J.users.find((q)=>q.handle===U);if(!G)throw Error(`Unknown pilot user: ${U}`);return{pilot:J.pilot,user:G}}async function OF($){let U=await H8$(ZJ(g8$(),"brains-ops-watchdog-smoke-")),J=ZJ(U,"id_ed25519"),G=ZJ(U,"known_hosts");try{let q=encodeURIComponent(`brain=${$.target.pilot.contentRepoPrefix}${$.target.user.handle}`),I=await $.fetchImpl(`https://api.hetzner.cloud/v1/servers?label_selector=${q}`,{headers:{Authorization:`Bearer ${$.environment.HCLOUD_TOKEN}`}});if(!I.ok)throw Error(`Hetzner server lookup failed with ${I.status}`);let Q=T8$.parse(await I.json());if(Q.servers.length!==1)throw Error(`Expected one smoke server, found ${Q.servers.length}`);let D=Q.servers[0];if(D?.status!=="running")throw Error("Smoke server is not running");await f6(J,K8$($.environment.KAMAL_SSH_PRIVATE_KEY),{mode:384}),await M8$(J,384);let X=await $.commandRunner("ssh-keyscan",["-T","10","-t","ed25519",D.public_net.ipv4.ip]);if(X.exitCode!==0||!X.stdout.trim())throw Error("Unable to resolve watchdog smoke SSH host key");return await f6(G,X.stdout,{mode:384}),{temporaryRoot:U,sshKeyPath:J,knownHostsPath:G,serverIp:D.public_net.ipv4.ip,commandRunner:$.commandRunner}}catch(q){throw await sH(U,{recursive:!0,force:!0}),q}}async function aH($,U,J){return $.commandRunner("ssh",[...ZF($),`root@${$.serverIp}`,"bash","-s","--",U,J],{stdin:tH()})}async function z8$($,U,J){return $.commandRunner("scp",[...ZF($),"-r",`root@${$.serverIp}:${U}/.`,J])}function ZF($){return["-i",$.sshKeyPath,"-o","BatchMode=yes","-o","IdentitiesOnly=yes","-o","ConnectTimeout=10","-o","StrictHostKeyChecking=yes","-o",`UserKnownHostsFile=${$.knownHostsPath}`]}async function A8$($){try{return await N8$($),!0}catch{return!1}}async function cY($,U,J){await Promise.all([f6(ZJ($,`${U}.stdout.log`),J.stdout),f6(ZJ($,`${U}.stderr.log`),J.stderr)])}function K8$($){return`${$.replace(/\r\n/g,`
 `).replace(/\\n/g,`
 `).trimEnd()}
-`}var XF,T8$;var aY=I$(async()=>{b$();GF();tU();OQ();await qF();XF=w.object({HCLOUD_TOKEN:w.string().min(1),KAMAL_SSH_PRIVATE_KEY:w.string().min(1)}),T8$=w.object({servers:w.array(w.object({status:w.string(),public_net:w.object({ipv4:w.object({ip:w.string().min(1)})})}))})});import{access as gK,chmod as l7,mkdir as IX,readFile as zK,writeFile as TK}from"fs/promises";import{dirname as Ef,join as C8}from"path";import{fileURLToPath as Cf}from"url";var MQ={name:"@rizom/ops",version:"0.2.0-alpha.311",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};kq();v4();var vf=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],i7=new Set([".kamal/hooks/pre-deploy"]),Ff=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),bf=Cf(new URL("../templates/rover-pilot/",import.meta.url)),uf=[`service: rover
+`}var XF,T8$;var aY=I$(async()=>{b$();GF();tU();OQ();await qF();XF=w.object({HCLOUD_TOKEN:w.string().min(1),KAMAL_SSH_PRIVATE_KEY:w.string().min(1)}),T8$=w.object({servers:w.array(w.object({status:w.string(),public_net:w.object({ipv4:w.object({ip:w.string().min(1)})})}))})});import{access as gK,chmod as l7,mkdir as IX,readFile as zK,writeFile as TK}from"fs/promises";import{dirname as Ef,join as C8}from"path";import{fileURLToPath as Cf}from"url";var MQ={name:"@rizom/ops",version:"0.2.0-alpha.312",description:"Operator CLI for managing private brain fleet registry repos",keywords:["brains","ops","cli","deploy","fleet","operator"],license:"AGPL-3.0-only",author:"Yeehaa <yeehaa@rizom.ai> (https://rizom.ai)",bin:{"brains-ops":"./dist/brains-ops.js"},bugs:"https://github.com/rizom-ai/brains/issues",dependencies:{"age-encryption":"^0.3.0",yaml:"^2.9.0"},devDependencies:{"@brains/deploy-support":"workspace:*","@brains/eslint-config":"workspace:*","@brains/profile":"workspace:*","@brains/site-composition":"workspace:*","@brains/test-utils":"workspace:*","@brains/typescript-config":"workspace:*","@brains/utils":"workspace:*","@types/bun":"^1.3.14",typescript:"^7.0.2"},engines:{bun:">=1.3.3"},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./deploy":{types:"./dist/deploy.d.ts",import:"./dist/deploy.js",bun:"./dist/deploy.js"}},files:["dist","templates"],homepage:"https://github.com/rizom-ai/brains/tree/main/packages/brains-ops#readme",main:"./dist/index.js",publishConfig:{access:"public"},repository:{type:"git",url:"https://github.com/rizom-ai/brains.git",directory:"packages/brains-ops"},scripts:{build:"bun scripts/build.ts",lint:"eslint . --max-warnings 0","lint:fix":"eslint . --max-warnings 0 --fix",prepublishOnly:"bun scripts/build.ts",test:"bun run build && bun test --timeout 20000","test:smoke":"bun run build && RUN_SMOKE_TESTS=1 bun test --timeout 60000",typecheck:"tsc --noEmit"},type:"module",types:"./dist/index.d.ts"};kq();v4();var vf=["pilot.yaml","package.json",".env.schema",".gitignore","cohorts/cohort-1.yaml","users/alice.yaml",".github/actions/varlock-env/action.yml",".github/workflows/build.yml",".github/workflows/deploy.yml",".github/workflows/directory-sync-stress.yml",".github/workflows/health-watchdog-smoke.yml",".github/workflows/reconcile.yml",".github/workflows/upgrade.yml","deploy/Dockerfile","deploy/kamal/deploy.yml","deploy/scripts/helpers.ts","deploy/scripts/install-health-watchdog.ts","deploy/scripts/provision-server.ts","deploy/scripts/update-dns.ts","deploy/scripts/write-ssh-key.ts","deploy/scripts/decrypt-user-secrets.ts","deploy/scripts/validate-secrets.ts","deploy/scripts/write-kamal-secrets.ts","deploy/scripts/resolve-user-config.ts","deploy/scripts/resolve-missing-images.ts","deploy/scripts/resolve-deploy-handles.ts","deploy/scripts/sync-content-repo.ts",".kamal/hooks/pre-deploy","docs/onboarding-checklist.md","docs/canonical-crossover-record.md","docs/operator-playbook.md","docs/user-onboarding.md","README.md"],i7=new Set([".kamal/hooks/pre-deploy"]),Ff=new Set(["cohorts/cohort-1.yaml","users/alice.yaml","docs/canonical-crossover-record.md"]),bf=Cf(new URL("../templates/rover-pilot/",import.meta.url)),uf=[`service: rover
 image: <%= ENV['IMAGE_REPOSITORY'] %>
 servers:

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rizom/ops",
-  "version": "0.2.0-alpha.311",
+  "version": "0.2.0-alpha.312",
   "description": "Operator CLI for managing private brain fleet registry repos",
   "keywords": [
     "brains",